DNS Monitors

Catch DNS changes before they cause an outage

One monitor watches a whole domain, across every record type it checks — A, AAAA, CNAME, MX, TXT, NS, CAA, TLSA, DS and SVCB — so hijacking and misconfiguration surface as findings rather than outages.

Monitor a site free for 7 daysView pricing
  • A/AAAA/CNAME/MX/TXT/NS
  • Change detection
  • One monitor per domain
Deep Dive

Every record change, reported

A closer look at what you get, from the first check to the alert that reaches you.

Record change detection

A watched record that changes or stops resolving is reported on the next check.

Every record type in one monitor

One monitor checks A, AAAA, CNAME, MX, TXT, NS, CAA, TLSA, DS and SVCB records at every name it tracks.

Hijack detection

Unexpected DNS changes are often the first sign of an account compromise.

New records are reported

A record that appears beside the ones you imported is reported as an addition, not hidden inside a changed value.
Get started

From a domain to a record diff

Three steps from an empty dashboard to checks that run on their own.

  1. Add a DNS monitor

    Enter the domain you want to watch, and paste your zone file to cover its other names.

  2. Review what we found

    Uptime checks every record type at every name it knows about, and you pick which records to watch.

  3. Get alerted on change

    A watched record that changes or disappears, or a record that appears unannounced, triggers an alert.
example.com.zone
$ORIGIN example.com.
$TTL 3600

@         IN  A      192.0.2.1
@         IN  AAAA   2001:db8::1
@         IN  MX     10 mail.example.com.
@         IN  TXT    "v=spf1 include:_spf.example.com ~all"
@         IN  CAA    0 issue "letsencrypt.org"
www       IN  CNAME  example.com.
api       IN  A      192.0.2.10
_dmarc    IN  TXT    "v=DMARC1; p=quarantine"
FAQ

Frequently asked questions

The questions people ask most before they start monitoring.

Which record types can I monitor?

Ten: A, AAAA, CNAME, MX, TXT, NS, CAA, TLSA, DS and SVCB. SOA, SRV, HTTPS and the rest aren't checked yet.

Does one monitor cover my subdomains?

Only the names it knows about. DNS can't be listed from outside a zone, so a monitor covers your domain itself unless you paste a zone file naming the rest.

Why would my DNS records change unexpectedly?

Account compromise, registrar misconfiguration, or an expired domain are the most common causes.

Start monitoring your services

Create your first monitor in under 2 minutes. No credit card required to start.