DNS and email security monitoring
Your DNS changed. Know before an attacker does.
Daily checks of SPF, DMARC, MX, NS and CAA. Every change is confirmed by a second resolver and shown as a readable diff.
Public DNS only. No agent, no access to your systems.
What you see
Quiet changes, made visible.
- 01
Read the records
The actual SPF, DMARC, MX, NS and CAA values, explained in plain words.
- 02
Keep a baseline
The first confirmed snapshot becomes the reference for every later check.
- 03
Follow the changes
Two resolvers must agree before you get an alert. No noise from propagation.
Features
What your workspace includes
Monitor up to 10 domains
Query public SPF, DMARC, MX, NS and CAA records. Daily automated checks keep the last successful baseline and show exact normalized values.
Confirm before alerting
Changes need agreement from Cloudflare and Google resolvers. Failed lookups and resolver disagreement preserve the previous confirmed baseline.
Understand the transition
See what changed, when it was observed and why it merits review. Acknowledge or mute findings and export the change history.
Control your monitoring
Pause or resume domains, request a fresh check with a five-minute cooldown, and configure email change alerts.
Keep useful history
Detailed snapshots are retained for 90 days and events for one year. DNS TTL and record ordering alone do not create change alerts.
Connect with MCP
Read owned monitors, confirmed snapshots, findings and change history using a revocable, expiring bearer key.
Built for a focused job
Configuration visibility. Human judgment.
Monitoring is daily. DNS changes may take time to propagate. This tool does not guarantee security. A configuration change is a reason to review, not proof of an attack.
Read the field guide →Make quiet changes visible.
Two months at $0 with BLACKFRIDAY26 in Stripe Checkout. Regular monthly pricing and renewal terms shown before confirmation.