DNS Monitoring That Catches Every Record Change

Set custom alert thresholds per domain. Get notified when a domain is 30, 14, or 7 days from expiry -- or pick your own threshold. Color-coded status badges make it easy to spot domains that need attention.

See your registrar, creation date, and WHOIS details for every monitored domain. Spot unauthorized registrar transfers immediately and keep an audit trail of registration changes.

Monitor nameserver assignments for every domain. Unauthorized NS changes can redirect traffic to attacker-controlled servers. Metric Tower flags changes instantly so you can respond before damage is done.

Automated checks run on a schedule, but you can trigger a manual WHOIS refresh for any domain at any time. See up-to-the-minute expiry data when you need it, not just when the next check runs.

Baseline and diff monitoring across all DNS record types -- A, AAAA, MX, NS, TXT, CNAME, SRV, and CAA. The first check establishes a baseline snapshot without alerting. Every subsequent check compares against it and notifies you of any changes, so nothing slips past unnoticed.

Not all DNS changes are equal. NS, A, AAAA, and MX record changes are classified as critical -- potential DNS hijacking or email interception. SPF weakening and DMARC removal are flagged as high severity. CAA, SRV, and TXT changes are medium. Every alert tells you exactly how urgent it is.

When Cloudflare, Akamai, or Fastly nameservers are detected, Metric Tower automatically suppresses A/AAAA record change alerts. CDN providers rotate IP addresses as part of normal operation -- so you only get alerted for changes that actually matter.

Choose exactly which DNS record types to monitor. All types are watched by default except SOA and PTR (which change frequently and are rarely security-relevant). Fine-tune monitoring per domain to match your infrastructure.

Detects when your SPF policy is weakened from -all to ~all, or when DMARC records are removed or downgraded. These changes can open your domain to email spoofing and phishing -- Metric Tower catches them before attackers do.