The alerts feed

Every alert the account is sent lands in the feed, whether or not the push was delivered. The feed is the record; the push is the copy.

What an alert carries

A severity word (High, Medium or Low), the domain, when it happened, and the event type: a finding, a change event, a site down or recovered, a provider incident, a breach hit, a DMARC sender, a KEV or CVE match, a registration or certificate running out, a scan finished. Provider alerts name the provider ("Cloudflare is having a major outage", "GitHub is back to normal"); a recovery is never drawn as a warning.

Open and Done

• Web: the Alerts page in the dashboard, with a read/unread state and an unread count in the navigation.
• iOS: the Alerts tab. Open / Read is a full-width control with counts. The tab badge is the open count.

Marking an alert done is POST /api/notifications/read (or the mark_alerts_read tool, with ids or none for all). Done cannot be reopened; the record stays under History.

Swipe actions (iOS)

Swipe an open alert for Read or Mute 7 d; a full swipe marks it read. Mute is kept on this iPhone only: a muted alert still shows as open on the web and on other devices.

Alert detail

Tap an alert for what it is, why it matters, the next action, and the evidence: when it was sent, how it was delivered, and for a change event the question it asks. Opening an alert marks it read. Two actions: Ask NHM and Open <domain>.

"Did you make this change?"

Change events from DNS, nameserver, certificate and email records appear as cards in the feed asking "Did you make this change?", with Yes, that was me, No and Not sure. The answer is recorded on the event. See Change events.

History

History is the account's ledger: every delivery attempt, action, credit spend and sign-in, merged into one timeline. GET /api/notifications/activity and the get_alert_activity tool return it; it is broader than the alert list, which is only what was sent.

The in-app banner

A push that arrives while the app is open shows DomainGuard's own banner for five seconds. Tapping it goes where the push would have.

Common questions

Do alerts come by email? No. Every alert is in this feed and is pushed to the app on any iPhone signed in to the account. If you only use the web, check the Alerts page. See Notification settings.

Can I delete an alert? No. Mark it done. The ledger is append-only so the record of what you were told stays intact.

Two devices, one account? Both get the push. Done syncs through the server; Mute does not.