Getting started

Add your first domain

What the add-domain sheet turns on by default, what the first scan covers, and how to import a list of domains at once.

Updated · 3 min read

Adding a domain runs everything the plan allows and opens the domain's page with its setup guide. You can turn off any of the optional checks in the add sheet before you commit.

Where

  • Web: Dashboard, Domains, the Add button (or /dashboard?panel=add).
  • iOS: Domains tab, the plus button. The sheet is half height and validates as you type.

What the field accepts

A registrable domain name such as acme-plumbing.com. Pasted links are fine (the scheme and path are stripped), international names and ports are accepted, and IP addresses and bare single words are refused before any request is sent. IP addresses and ranges belong under Network targets.

What is on by default

Switch What it does Plan
Watch it automatically Nightly re-scan and the five-minute uptime probe, counted against the plan's automated-domain allowance (3 on Free) Free for three domains, more on paid plans
Impostor-domain check Generates lookalike variations and checks which are registered Free (the check); the nightly watch is Starter and up
Subdomain discovery Reads certificate logs and DNS for hosts under the domain, up to 100 Free
Exposure scan One vulnerability and open-port scan at add time. Continuous scanning stays off until you say yes in the setup guide Free (one manual scan every 7 days); scheduled on paid plans
Accessibility audit An axe-core audit in a real browser, up to 10 pages, costs 5 credits Any plan with credits
Watch mailboxes for exposure Adds addresses at the domain to breach monitoring Free for one address
SEO crawl A whole-site crawl Starter (25 pages) and Pro/Enterprise (full site); switched on where the plan includes it

What the first scan covers

The first scan runs the domain health scan (DNS, nameservers, DNSSEC, registrar record, expiry), the certificate read, the email authentication checks, the security checkup and the single-page SEO, accessibility and mobile checks, all server-side, and writes them to every place the dashboard and the app read. On Free, the first domain scan is one of the six website scans a day the plan allows on demand.

The domain page opens on its last-known data and refreshes behind it. In the app, a "waiting on results" bar shows while the exposure scan runs, and Scan now shows what it found without leaving the page.

Importing many domains

  • iOS: Domains tab, Import domains. Paste a list, one per line, or a DomainGuard export.
  • Web and API: POST /api/domains/bulk takes up to 100 domains in one call and reports which were added and which were skipped (already present or invalid). The MCP tool is add_domains_bulk.

Over the automated allowance, domains are still added and still scan on demand; the oldest domains keep the automation. See What runs automatically.

Guided onboarding by conversation

If you connect Claude over MCP, plan_domain_onboarding returns the questions to ask (does it send email, which checks to run at add time, the accessibility audit and its cost, exposure monitoring, whether it is a local business, where alerts go, an ownership email, which mailboxes to watch, which group it belongs in) and onboard_domain applies the answers in one write without spending credits. See Guided onboarding over MCP.

Still stuck?

Ask the people who run the scanner.

Send the domain and what you expected to see. We look at the same scan you are looking at and write back with what it means and what to change.