DNS monitoring for every client domain
ZoneOwl checks the DNS records on every domain your agency looks after and tells you when one changes. Nameservers, mail servers, email security, all of it, with what changed from and to.
Why DNS changes need watching
Uptime monitors ask whether the page loads. Most DNS problems don't stop it loading, at first. A client's IT person swaps the mail provider and forgets SPF. A registrar account gets taken over and the nameservers quietly move. A developer deletes a TXT record that looked unused. The site stays up and nobody notices until email bounces or a phishing campaign goes out from the client's own domain.
What ZoneOwl watches
Nameservers
CriticalWhoever controls the nameservers controls the website and email. A change you didn’t make is the first sign of a hijacked domain.
MX records
CriticalIf the mail servers change, incoming email goes somewhere else. You hear about it within a day, not when the client asks where their email went.
A and AAAA records
WarningThe website now points to a different server. Expected after a migration, worth a look if nobody planned one.
SPF, DMARC and DKIM
WarningA removed SPF record, a DMARC policy dropped from reject to none, or a DKIM key that stops resolving. Each makes the domain easier to spoof.
TXT records
WarningVerification tokens, SPF and other TXT records, with exactly what was added and removed.
www CNAME and CAA
WarningWhere www points, and which certificate authorities are allowed to issue certificates for the domain.
Resolution and DNSSEC
CriticalThe domain stops resolving, or DNSSEC signatures stop validating so much of the internet sees it as offline.
How it works
- 1
Add your client domains
Add them one at a time or paste a whole list. No DNS changes and no access needed from the client.
- 2
ZoneOwl records a baseline
The first scan saves every record it finds, so later scans have something to compare against.
- 3
You get told what changed
Every 24 hours the records are checked again. A change sends an alert with the old and new values, by email, Slack, Teams or webhook.
Questions
- What is DNS monitoring?
- DNS monitoring means looking up a domain’s DNS records on a schedule and comparing them with the last known values. When a record changes or disappears, you get an alert with what it was and what it is now.
- How often does ZoneOwl check DNS?
- Every 24 hours on every plan, and you can run a scan on any domain whenever you like.
- Do I need to change my clients’ DNS or give you access?
- No. ZoneOwl uses the same public DNS lookups any resolver makes. Nothing to install, no records to add, no registrar logins.
- Will a planned migration flood me with alerts?
- You get one alert per change, describing what was added and removed. If a workspace changes DNS all the time, you can switch DNS change alerts off in its alert settings and keep the outage and DNSSEC alerts.
- Where do the alerts go?
- Email and webhooks on every plan. Agency and Pro add Slack and Microsoft Teams.
- What else does ZoneOwl check?
- SSL certificates, domain renewal dates, email security and registered lookalike domains, all in the same daily scan.
Know before your client does
Plans start at $19 a month for 25 domains. Every plan starts with a 14-day free trial, no card needed.