Getting started
Add your first domain
What the add-domain sheet turns on by default, what the first scan covers, and how to import a list of domains at once.
Updated · 4 min read
Adding a domain runs everything the plan allows and opens the domain's page with its setup guide. You can turn off any of the optional checks in the add sheet before you commit.
Where
- Web: Add domain in the top bar or on Domains (or
/dashboard?panel=add). - iOS: Monitoring tab, the plus button. The sheet is half height and validates as you type.
What the field accepts
A registrable domain name such as acme-plumbing.com. Pasted links are fine (the scheme and path are stripped), international names and ports are accepted, and IP addresses and bare single words are refused before any request is sent. IP addresses and ranges belong under Network targets.
What is on by default
Every switch starts on. The web sheet lists them under "What happens when you add this domain"; the app splits them into Watch automatically and "Runs when you add it".
| Switch | What it does | Plan |
|---|---|---|
| Domain & email security checkup (web) / Watch automatically (iOS) | The first checkup always runs. Left on, the domain is re-checked on the plan's schedule and counted against the automated-domain allowance (3 on Free) | Free watches three domains with the uptime probe only; the scheduled re-check starts on Starter |
| Uptime | Loads the site every five minutes from Cloudflare and from our own server, and alerts when both see it down | Free for three domains, more on paid plans |
| Website Watch | Once a day, compares the homepage with the day before for defacement, spam or a redirect | Starter and up |
| Impostor domains | Generates lookalike variations and checks which are registered | Free (the check, once); the watch is weekly on Starter, daily on Pro and Enterprise |
| Subdomains | Reads certificate logs and DNS for hosts under the domain, up to 100, and keeps the ones that resolve | Free (the discovery); watching their certificates every day starts on Starter |
| Vulnerabilities | One exposure scan at add time, passive until you prove ownership | Free (one manual scan every 7 days); scheduled on paid plans, and you can turn the schedule off in the setup guide |
| Website & SEO snapshot (web) / SEO crawl (iOS) | The web switch scores the homepage for search; the app's switch runs a whole-site crawl | Starter (25 pages) and Pro/Enterprise (more; see Full-site crawl for the page limits). On Free the crawl row is locked, and the homepage SEO read still runs with the first scan |
| Accessibility audit | An axe-core audit in a real browser, up to 10 pages, costs 5 credits | Any plan with credits; skipped, and said so, when the balance is short |
Mailboxes are not part of the add sheet. Breach monitoring is set up in the app's Exposure tab; see Mailbox exposure monitoring.
What the first scan covers
The first scan runs the domain health scan (DNS, nameservers, DNSSEC, registrar record, expiry), the certificate read, the email authentication checks, the security checkup and the single-page SEO, accessibility and mobile checks, all server-side, and writes them to every place the dashboard and the app read. On Free, the first domain scan is one of the six website scans a day the plan allows on demand.
The domain page opens on its last-known data and refreshes behind it. In the app, a "waiting on results" bar shows while the exposure scan runs, and Scan now shows what it found without leaving the page.
Importing many domains
- iOS: Monitoring tab, List options (below the list), then Import domains. Paste a list, one per line, a spreadsheet column or a DomainGuard export.
- Web and API:
POST /api/domains/bulktakes up to 100 domains in one call and reports which were added and which were skipped (already present or invalid). The MCP tool isadd_domains_bulk.
Over the automated allowance, domains are still added and still scan on demand; the oldest domains keep the automation. See What runs automatically.
Guided onboarding by conversation
If you connect Claude over MCP, plan_domain_onboarding returns the questions to ask (does it send email, which checks to run at add time, the accessibility audit and its cost, exposure monitoring, whether it is a local business, an ownership email, which mailboxes to watch, which group it belongs in) and onboard_domain applies the answers in one write without spending credits. See Guided onboarding over MCP.
Keep reading
Related articles
- Hosts and open portsEvery host a scan found, grouped by domain, with its services named by what the port means; the 134-port list; and why an empty list is not an all-clear.Vulnerabilities and exposure ·Updated
- Guided onboarding and playbooks over MCPAdd a domain by answering questions, set up Local SEO with a quoted first measurement, and the review, triage and deliverability playbooks an assistant follows.API and MCP ·Updated
- The domain setup guideThe per-domain checklist computed from what is actually set up: first check, alerts, email records, DMARC reports, ownership proof, monitoring and more.Getting started ·Updated
