What we watch
Every one of these is checked on a schedule from the day you enter your domain. You never configure any of it, and anything urgent reaches you the moment it is found, on every plan including the smallest.
Renewal date, registrar, nameservers and transfer status. The single most expensive thing on this list to get wrong.
Read moreExpiry date, issuing authority, the names it covers and the full chain of trust behind it.
Read moreSPF, DKIM, DMARC and MX. The failure nobody notices, because broken email looks exactly like disinterest.
Read moreEverything still resolving, including forgotten staging sites and records pointing at services that no longer exist.
Read moreWhere the site actually lives, which third-party scripts are embedded, and what changed on the pages that matter.
Read moreOne email confirming where things stand, carrying how long the record has run without a break.
Read moreOn why these are hard to notice at all: the failures that do not produce an error.
Every scan is compared against the last
Checking a domain tells you what is true today. Comparing today against last week tells you what moved, who moved it, and on what date — which is the question nobody can answer after the fact.
Four changes mean somebody may be taking your domain, or that it is offline right now. These do not wait for the weekly email.
clientHold and serverHold mean the domain is not resolving now. pendingTransfer means somebody started moving it.Changes worth knowing about, without interrupting your day.
Some changes are good news. They belong in the history rather than in your inbox, because an alert that needs no action is how people learn to stop reading alerts.
None of this needs configuring. There are no thresholds to set and no rules to write, because every one of these is unambiguous: a record either changed or it did not. The comparison uses data we already read, so watching costs nothing extra beyond keeping it.
How the checks behave
Sent every week whether or not anything happened. It confirms the position, carries the number of days the record has run without a break, and lists anything that changed. Most weeks it says nothing broke, which is the point.
Sent the moment something is found that has a deadline or has already failed. An approaching expiry, a certificate that stopped validating, mail authentication that broke. These are the same on every plan, because paywalling a warning is not something we are willing to do.
What you will not get
Plenty of monitoring tools report things that might be a problem. A page loaded slightly slower. A script appeared. A header changed. Each one arrives as a question rather than a fact, and answering it becomes your job.
We only report states that are unambiguously true. A date either passed or it did not. A record either validates or it does not. A subdomain either resolves or it does not. If a finding would need judgement to act on, we would rather not send it.
The practical effect is that you can trust the weekly email enough to skim it, and trust an urgent alert enough to act on it without checking first. That is the whole design.
The first check is free and takes about ten seconds. No account, no card.
Check yours
The free check finds everything at once, in about ten seconds. No account, no card.