Alerts

The alerts feed

How alerts are listed, what Open and Done mean, swipe to Done or Mute 7 d, the alert detail page, and the account History ledger.

Updated · 2 min read

Every notification the account is sent lands in the feed, whether or not the push or email was delivered. The feed is the record; delivery is the copy.

What an alert carries

A severity word (High, Medium or Low), the domain, when it happened, and the event type: a finding, a change event, a site down or recovered, a provider incident, a breach hit, a DMARC sender, a KEV or CVE match, a scan finished. Provider alerts name the provider ("Cloudflare is having a major outage", "GitHub is back to normal"); a recovery is never drawn as a warning.

Open and Done

  • Web: Monitor, the alert list, with a read/unread state.
  • iOS: the Alerts tab. Open / Done is a full-width control with counts. The tab badge is the open count.

Marking an alert done is POST /api/notifications/read (or the mark_alerts_read tool, with ids or none for all). Done cannot be reopened; the record stays under History.

Swipe actions (iOS)

Swipe an open alert for Done or Mute 7 d; a full swipe marks it done. Mute is kept on this iPhone only: a muted alert still shows as open on the web and on other devices.

Alert detail

Tap an alert for what it is, why it matters, the next action, and the evidence: when it was sent, how it was delivered, and for a change event the question it asks. Three actions: Mark as done, Ask NHM, and Open <domain>.

"Did you make this change?"

Change events from DNS, nameserver, certificate and email records appear as cards in the feed with Confirm and Flag. The answer is recorded on the event. See Change events.

History

History is the account's ledger: every delivery attempt, action, credit spend and sign-in, merged into one timeline. GET /api/notifications/activity and the get_alert_activity tool return it; it is broader than the alert list, which is only what was sent.

The in-app banner

A push that arrives while the app is open shows DomainGuard's own banner for five seconds. Tapping it goes where the push would have.

Common questions

Why did I get a push but no email? Email needs a paid plan and the email switch for that alert type. See Notification settings.

Can I delete an alert? No. Mark it done. The ledger is append-only so the record of what you were told stays intact.

Two devices, one account? Both get the push. Done syncs through the server; Mute does not.

Still stuck?

Ask the people who run the scanner.

Send the domain and what you expected to see. We look at the same scan you are looking at and write back with what it means and what to change.