Help center
Domains
Everything about a watched domain: the health scan, certificates, registration expiry, uptime, change events, subdomains, groups and scan settings.
Updated · 8 articles
A domain in DomainGuard is a row in your inventory with a page behind it. On the web the page has five tabs (Overview, Site check, SEO & search, Email & DMARC, Uptime); in the app it opens on its setup guide, three status cards (Domain, Email, Website), the findings that need attention, and thirteen modules. This category covers the modules that are about the domain itself; email, website, exposure and impostor checks each have their own category.
Articles
- Domain health scan - DNS records, nameservers, DNSSEC, the registrar record, and registration expiry notices.
- Certificate monitoring - where certificate data comes from, subdomain certificates, and why auto-renewing certificates stay quiet until their last day.
- Uptime monitoring - the five-minute probe, when a site counts as down, recovery, and the Live Activity.
- Change events: "Did you make this change?" - DNS, nameserver, registrar and certificate changes as questions with an answer.
- Subdomain discovery and per-host results - up to 100 hosts per domain, each with its own certificate, ports and findings.
- Groups, Personal and Business - organising the portfolio by label and by client.
- Scan settings and cadence - daily, every three days, weekly or hourly; Basic or Standard; pausing one domain.
- The domain page, history and removal - the web tabs and the app's modules in order, the history ledger, Export PDF, and what removing a domain deletes.
Where domains live
- Web: Domains in the rail; open a domain for its page (tabs Overview, Site check, SEO & search, Email & DMARC, Uptime).
- iOS: the Monitoring tab, one row per domain with its worst finding, when it was last scanned, and a Domain · Email · Website strip naming each provider.
- API and MCP:
GET /api/domains,list_domains. The numeric ids it returns are what every other tool takes.
Common questions
How many domains can I add? Unlimited on every plan. What the plan decides is how many are watched automatically: 3, 25, 100 or unlimited.
Do I need to own a domain to add it? No. Basic scans read public records and run on any domain. Deep scans (open ports, known vulnerabilities, exposed files) wait until the domain is verified: your verified sign-in address is at it, you verified it with an email link, DNS record or file, or we approved the account. See Which domains you can scan.
What does a domain's status word mean? Healthy: nothing needs you. Review (Needs work on the web): something to look at that is not broken. Action (At risk on the web): a finding with a next action, or a date that is close.
In reading order
Articles in Domains
- Domain health scanWhat the domain scan reads (DNS, nameservers, DNSSEC, the registrar record, expiry) and how the registration expiry notices are timed.Updated
- Certificate monitoringHow our scanner reads each certificate straight from your server every day, what it checks beyond the expiry date, subdomain and service-port certificates, and the quiet rule for certificates that renew themselves.Updated
- Uptime monitoring and site-down alertsHow the five-minute probe decides a site is down, what a recovery looks like, which plans are probed, and the Lock Screen Live Activity.Updated
- Change events: "Did you make this change?"How DomainGuard detects DNS, nameserver, registrar and certificate changes, the question it asks, and the lifecycle each event goes through.Updated
- Subdomain discovery and per-host resultsHow hosts under a domain are found (certificate logs and DNS), the 100-host limit, and what each host's page shows: status, certificate, ports and findings.Updated
- Groups, Personal and BusinessTwo ways to organise a portfolio: free-form group labels, and the Personal/Business split that files a domain under a client.Updated
- Scan settings and cadenceThe daily scan's options on each domain (uptime, Website Watch, SEO cadence, subdomains, exposure, impostor watch, local report), the account-wide frequency, pausing one domain, and the scan-finished notification.Updated
- The domain page, history and removing a domainThe four tabs of a domain's web page, the twelve modules in the app, the History ledger, the one-round-trip overview, Export PDF, and what deleting a domain destroys.Updated
Still stuck?
Ask the people who run the scanner.
Send the domain and what you expected to see. We look at the same scan you are looking at and write back with what it means and what to change.