Crowswatch

Domain Watch

Someone changed your domain. Nobody told you.

Your domain decides where your website lives and whether your email is trusted. One record changed by an agency, a provider or a colleague can quietly break it. Domain Watch checks your DNS, SSL certificates and email records every hour and tells you when something changes.

Get startedTalk to us
Example only. Hollowmoor is fictional.

Domains rarely break all at once

  1. Step 1

    A record gets changed

    An agency moving your website, or a provider setting up a new tool, edits a DNS record.

  2. Step 2

    Something stops matching

    Your email protection no longer lines up with the services that send your email.

  3. Step 3

    Email goes astray

    Messages start landing in spam, and it gets easier for someone to send email that looks like it came from you.

  4. Step 4

    Someone else tells you

    A customer or supplier mentions a missing invoice or a strange email. By then the change is weeks old.

Set up once, then forgotten

Most domains are configured when the business starts and rarely looked at again, while agencies, providers and staff keep making changes. Domain Watch checks each domain every hour and tells you when its setup changes.

What it checks, from DNS to DMARC

Every check reads public records, so there is nothing to install and no access to grant.

Security and ownership

Name servers (NS)

Who answers for your domain. A change here can send your website and email somewhere else.

Registrar (RDAP)

Where the domain is registered, so a move you did not expect stands out.

Registration expiry (RDAP and WHOIS)

When the domain registration runs out, with warnings well before it lapses.

Website certificate (SSL/TLS)

When your certificate expires, who issued it and which TLS version it uses.

DNS signing (DNSSEC)

Whether your DNS is signed, with an alert if signing is turned off.

Core DNS records (A, AAAA, MX, NS and TXT)

That the records your website and email depend on are there and resolving.

Email

Email spoofing protection (DMARC)

Whether receiving servers are told to reject or quarantine email pretending to be you, and whether that policy gets weaker.

Approved senders (SPF)

Which services may send email for your domain, and whether the record lets anyone send.

Email signing (DKIM)

Whether your email provider's signing key can be found.

Mail servers (MX)

Where your email is delivered, with an alert if that changes.

Email authentication readiness (SPF, DKIM and DMARC alignment)

Whether the three records work together so your email is trusted.

Brand logo in inboxes (BIMI)

Whether a record is set up to show your logo in inboxes that support it.

How it alerts you

Each scan is compared with the one before, so you hear about what changed rather than the same findings every time.

What triggers an alert

Name servers, mail servers or the registrar changing, DMARC getting weaker, SPF or DKIM disappearing, DNSSEC being turned off, a certificate or registration close to expiry, or the health score dropping. You choose which apply.

Without the noise

One message per domain for each scan, and the same finding at most once a day while it lasts.

Where alerts go

Email on every plan, and Slack on paid plans. Each alert channel chooses which domains it covers.

Questions

What if my IT provider or agency manages my DNS?Show

That is fine. Domain Watch reads your public records, so it sees their changes too, without needing their help or a login.

Do I need to give you access to anything?Show

No. Every check uses public DNS, certificate and registration records. If your DNS is on Cloudflare, you can also connect it with a read only token for a deeper look at the full zone.

What happens when I make a planned change?Show

You get one alert for the change. After that, the new setup is what the next scan is compared with, so you are not told again.

How often are my domains checked?Show

Every hour by default. You can check as often as every 10 minutes on the Free plan and every minute on paid plans.

How many domains can I monitor?Show

One on the Free plan and up to 100 on Standard. Talk to us if you need more.

How is this different from my registrar's expiry emails?Show

Your registrar reminds you when the registration is due. Domain Watch also watches your certificate, name servers, mail servers and email protection, and alerts your team's email or Slack.

Know when your domain changes

Start free with one domain.

Get startedTalk to us

Other Crowswatch products