Stop DNS Changes from Blindsiding Your Team
Monitor DNS records, SSL certificates, and domain expirations around the clock. Get alerted to changes in minutes, not from upset customers.
Monitor DNS records, SSL certificates, and domain expirations around the clock. Get alerted to changes in minutes, not from upset customers.
Direct integration with DNS service providers you already rely on
Don't see your provider? No problem! We have public DNS resolver integrations to support almost every need.
New Guy Mistake? No Worries.
With ZoneWatcher you have a full backup of all your DNS records. You can easily review changed records and use the unlimited history tracking to find the correct value needed to fix the issue. No more digging through emails or outdated technical documentation.
We monitor the official WHOIS record for your domains and alert you when any of the following change:
Stay ahead of SSL/TLS certificate issues with comprehensive monitoring. We track your certificates and alert you before problems impact your users.
Since 2016, thousands of MSPs, Agencies, and Companies have used ZoneWatcher to protect their DNS infrastructure.
Zonewatcher monitors DNS records for thousands of domains, sending out hundreds of thousands of notifications to users about changes to their DNS records. These notifications have helped users catch unauthorized changes, misconfigurations, and other issues before they can cause downtime or security incidents.
DNS monitoring, change logging, and real-time alerting map directly to the controls auditors look for. ZoneWatcher generates the evidence automatically.
Start monitoring now and easily switch your plan as your needs grow.
Need something custom? Contact Us for special pricing!
Yes! We try to integrate directly with the APIs of service providers whenever we can, but if the provider you use doesn't have an API, we provide a Public DNS provider which uses the public DNS system just like a user would.
We are open to natively supporting any provider that has a clean API for us to integrate with. Please reach out to support@zonewatcher.com if you have suggestions for a provider we currently don't support natively. In the meantime, you can always add a Public DNS provider to your account to monitor the domains through the Public DNS system.
Sensitive payment data is handled by Stripe and is never submitted to our servers.
Please reach out to support@zonewatcher.com to set up a custom plan with special discounts for a large number of domains.
When you choose a provider that is natively supported, we connect to that provider's API to retrieve all DNS records you have stored. If you are using a Public DNS provider through the Public DNS system, we will automatically search for common record names and types for you, and provide you the ability to add custom records you'd like us to monitor.
DNS is the foundation of how users reach your services. Unauthorized changes to your DNS records — whether from a compromised account, a rogue employee, or a DNS hijacking attack — can redirect your traffic to malicious servers without your knowledge. Continuous DNS monitoring detects these changes within minutes, alerting you before attackers can exploit them to intercept sensitive data, launch phishing campaigns, or disrupt your operations.
Check frequency depends on your plan. Records are checked as frequently as every 5 minutes on higher-tier plans and up to every 30 minutes on smaller plans. Our system runs continuously, queuing checks every minute so your zones are scanned as soon as their next check is due. You can view the exact check intervals on our pricing page.
We support Email, Slack, Microsoft Teams, Discord, custom Webhooks, GitHub Issues, and Jira. You can configure multiple channels per team and choose exactly which event types each channel receives — from DNS record changes and nameserver updates to domain expiration warnings and new certificate issuances.
Certificate Transparency (CT) is a public framework that logs every SSL/TLS certificate issued for a domain. ZoneWatcher monitors these logs and alerts you whenever a new certificate is issued for any of your monitored domains — even if it wasn't requested by you. This helps you detect unauthorized or fraudulent certificates early, before they can be used in phishing or man-in-the-middle attacks.
Yes. ZoneWatcher provides a complete audit trail of every DNS change with timestamps, old values, and new values — exactly what auditors look for. Our monitoring and change logging capabilities support requirements across SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR, covering areas like continuous monitoring, incident detection, asset inventory, and accountability documentation.
Yes. We track your domain registration details including expiration dates, registrar information, and nameserver assignments. You'll receive alerts at 30, 14, 7, and 1 day before a domain expires, as well as notifications if a domain has already expired, been renewed, or had its nameservers changed — helping you prevent accidental lapses and detect unauthorized transfers.
