ZeroAuthority WATCH

Outages and silent DNS or certificate changes are usually found by customers first. WATCH is the home of continuous monitoring. Domain Watch scans the domains you verify every 5 minutes, and website integrity, asset discovery, brand monitoring, email security and policy checks all run on the same engine and the same verified domains.

Data source

DNS-over-HTTPS, RDAP, TLS handshakes and HTTP requests to domains you verify; Certificate Transparency logs; the pages of lookalike domains it finds; alerts sent by email

Sent externally

Yes, to ZeroAuthority and Public DNS resolvers, RDAP registry servers, Certificate Transparency logs, Cloudflare Radar (network names and ownership), Resend (alert email).

• Domain WatchAvailable nowScans domains you have verified every 5 minutes and emails you when something changes. Covers availability, DNS, certificates, security headers, email authentication, registration, exposed files, open ports and content changes.
• Website IntegrityAvailable nowRecords every script and stylesheet your home page loads, fingerprints each one, flags changed or new code, third-party scripts without integrity hashes and skimmer-style patterns, and keeps the before and after evidence. No screenshots or browser rendering.
• Asset DiscoveryAvailable nowBuilds an inventory of the hosts, IP addresses, networks, open services and third-party dependencies seen for a verified domain, scores the exposed surface and tells you when something new appears or disappears.
• Brand & Impersonation MonitoringAvailable nowFinds registered lookalike domains and domains containing your brand names, checks which are live, compares their page with yours and gathers registrar and hosting abuse contacts. Reviews are tracked in your own list.
• Advanced Email SecurityAvailable nowScores spoofing protection from your SPF, DKIM, DMARC and MTA-STS records, shows how to fix each gap, and analyses DMARC aggregate reports you upload to show who sends as your domain.
• Security Policies & BaselinesAvailable nowEvaluate each domain against presets or your own rules, record exceptions with reasons and expiry dates, approve a known good configuration and see drift from it. A configuration check, not an audit.

• Website availability monitoring
• DNS monitoring and change detection
• SSL/TLS certificate monitoring
• HTTP security header checks
• Email authentication checks (SPF, DKIM, DMARC)
• Domain registration monitoring
• Infrastructure observations: exposed files, open ports, takeover risk, software exposure
• Content change detection and a full change history
• Script and third-party resource integrity with preserved evidence
• Asset inventory and attack surface score
• Lookalike domain and brand impersonation tracking
• Spoofing protection score and DMARC report analysis
• Security policies, exceptions and configuration drift

1. 1Register domain→
2. 2Verify ownership→
3. 3Scan every 5 minutes→
4. 4Analyze changes→
5. 5Receive alerts

• Public DNS resolvers over DNS-over-HTTPS
• RDAP registry servers
• TLS handshakes
• Resend (alert email)
• Slack, Teams, Discord and webhooks through Integrations

• All of Domain Watch on Reserve
• Alert destinations through Integrations
• Full change history

• ZeroAuthority FORGE
• ZeroAuthority SIFT
• ZeroAuthority CHAIN