ZoneWatcher Features

Continuously track changes to A, AAAA, CNAME, MX, TXT, NS, and all other DNS record types. Get alerted within minutes of any modification.

Monitor Certificate Transparency logs for new issuances and track expiration dates. Get alerts before certificates expire — only when no renewal is detected.

Detect unauthorized nameserver changes via WHOIS monitoring. Catch domain hijacking attempts and accidental delegation changes before they cause outages.

Track domain expiration dates, registrar changes, and WHOIS record modifications. Get alerts at 90, 60, 30, 14, 7, and 1 day before expiry.

Continuous checks for CAA, DMARC, DKIM, SPF, HSTS, Safe Browsing, domain locks, and nameserver reachability — the records most teams forget about.

Verify the DNSSEC chain of trust on every zone. Catch broken signatures, drifted DS records, and stalled key rollovers before validating resolvers stop serving you.

Stage record changes into a reviewable changeset, dry-run validate against your provider, route through approval, and apply on schedule — never an unreviewed direct write.

One-click rollback of any applied changeset, plus Revert Change for individual checks. Both produce a reviewable draft — no surprise reverts.

Watch your applied changes roll out to public resolvers around the world in real time. Per-resolver status, first-seen timing, and a Propagated event when it's truly done.

Every DNS change is scored 1–100 for security risk using AI. Includes geolocation analysis, ASN detection, and risk-enriched notifications.

Automatically import DNS records via provider APIs, or discover subdomains from a database of 10,000+ common patterns when API access isn't available.

Surface newly registered lookalike domains targeting your brand — homoglyphs, typos, alternate TLDs, and compound variations — before the phishing campaign launches.

Complete audit trail of every DNS modification with timestamps, old and new values, and side-by-side comparison. Unlimited retention.

Generate point-in-time PDF compliance reports with attribution, AI risk annotations, and full change logs. Built for SOC 2, ISO 27001, and HIPAA evidence packs.