How it works

DNSCheckPro is a continuous monitor for the public-facing parts of your DNS. You add a domain; we do the rest — discovery, scheduled snapshots, WHOIS and certificate tracking, posture grading, and alerts.

1. 1.

   Add a domain — we discover

   Type a name. We resolve every record type (A, AAAA, MX, TXT, CNAME, NS, CAA, SRV, DNSSEC), pull WHOIS/RDAP for the registration data, walk certificate transparency logs for known subdomains, and fetch the live cert chain. No zone file upload required — it's all from public sources.

2. 2.

   Continuous, scheduled snapshots

   DNS records snapshot hourly (or whatever cadence your plan supports). WHOIS refreshes daily. Certificates re-check daily and on cert-transparency events. Every snapshot is stored — diffable forever.

3. 3.

   Diff anything against anything

   Pick two snapshots. We show added, removed, and modified records side by side, with the exact timestamp each change first appeared. Incident at 3am? Compare "now" to "12 hours ago" and find the root cause in seconds.

4. 4.

   Posture grade

   On every snapshot we re-grade your DNS posture: SPF/DKIM/DMARC alignment, DNSSEC chain, CAA presence, MTA-STS, TLSA, and more. You get a single letter grade plus a concrete punch list of fixes.

5. 5.

   Alerts that escalate

   90 / 60 / 30 / 14 / 7 / 1 day countdowns for domain and certificate expiration. Real-time alerts on any record change or posture grade drop. Email at minimum; Slack, webhook, and SMS on paid plans. No spam — we batch and respect your quiet hours.