Alerts
The alerts feed
How alerts are listed, what Open and Done mean, swipe to Done or Mute 7 d, the alert detail page, and the account History ledger.
Updated · 2 min read
Every notification the account is sent lands in the feed, whether or not the push or email was delivered. The feed is the record; delivery is the copy.
What an alert carries
A severity word (High, Medium or Low), the domain, when it happened, and the event type: a finding, a change event, a site down or recovered, a provider incident, a breach hit, a DMARC sender, a KEV or CVE match, a scan finished. Provider alerts name the provider ("Cloudflare is having a major outage", "GitHub is back to normal"); a recovery is never drawn as a warning.
Open and Done
- Web: Monitor, the alert list, with a read/unread state.
- iOS: the Alerts tab. Open / Done is a full-width control with counts. The tab badge is the open count.
Marking an alert done is POST /api/notifications/read (or the mark_alerts_read tool, with ids or none for all). Done cannot be reopened; the record stays under History.
Swipe actions (iOS)
Swipe an open alert for Done or Mute 7 d; a full swipe marks it done. Mute is kept on this iPhone only: a muted alert still shows as open on the web and on other devices.
Alert detail
Tap an alert for what it is, why it matters, the next action, and the evidence: when it was sent, how it was delivered, and for a change event the question it asks. Three actions: Mark as done, Ask NHM, and Open <domain>.
"Did you make this change?"
Change events from DNS, nameserver, certificate and email records appear as cards in the feed with Confirm and Flag. The answer is recorded on the event. See Change events.
History
History is the account's ledger: every delivery attempt, action, credit spend and sign-in, merged into one timeline. GET /api/notifications/activity and the get_alert_activity tool return it; it is broader than the alert list, which is only what was sent.
The in-app banner
A push that arrives while the app is open shows DomainGuard's own banner for five seconds. Tapping it goes where the push would have.
Common questions
Why did I get a push but no email? Email needs a paid plan and the email switch for that alert type. See Notification settings.
Can I delete an alert? No. Mark it done. The ledger is append-only so the record of what you were told stays intact.
Two devices, one account? Both get the push. Done syncs through the server; Mute does not.
Keep reading
Related articles
- KEV and CVE alerts with verdictsHow the CISA KEV and NVD feeds are ingested, why only new entries alert (watch-forward), the four exposure verdicts, the advisory page, and the global feed.Vulnerabilities and exposure ·Updated
- The domain page, history and removing a domainThe twelve modules on a domain's page, the History ledger, the one-round-trip overview, Export PDF, and what deleting a domain destroys.Domains ·Updated
- The five tabsDomains, Alerts, Check, Exposure and Account: what each tab answers, what is on it, and the deep links and Home Screen quick actions that open each.iOS app ·Updated
