You answer for every client’s domains.

Every client’s domains under one signed watch.

An IT shop answers for every client’s domains and cannot watch them all by hand. DomainDrift is one watch over all of them. Certificate expiry, email-auth downgrades, DNS, hosting and registrar moves, a record left dangling. Group by client, read one dashboard, and get one alert the moment something moves. The report reaches your desk before the client calls.

Watch your first client domain → What it's for

~809,000 domains tracked 612,000 scans a day Signed the moment it is observed

A missed certificate takes the site offline.

“In 2016 a widely used software package registry went offline for about an hour and a half after its TLS certificate expired; its renewal had been started weeks earlier and the confirming check was forgotten.”

the crates.io certificate-expiry postmortem, 2016 ↗

Quoted from a public discussion. Not a customer, not affiliated with DomainDrift, and not an endorsement.

How do I watch every client’s domains without checking each one by hand?

A group per client. Every domain in it goes under continuous watch: DNS, registration, certificates, mail settings, reachability, whoever hosts or registers it. One account holds the whole book, any registrar, any host. A DRM3 account watches one domain; the top monitoring plan watches thousands of domains, and past that we size it with you. For a client-services agency, see the agency page.

A client swears nothing changed; the group shows the nameserver a former vendor moved last week.

Know a certificate is about to expire before the client’s site breaks

Every reading records each domain’s certificate expiry and who issued it, across the whole book. An expiry drawing close, or an issuer that changed since last time, is a change you are told about. Check any one at /tools/ssl.

A weekend certificate lapse takes a client’s checkout down; the warning was on your desk days earlier.

Catch an email-auth downgrade the moment it happens

SPF, DKIM and DMARC decide who may send mail as your client. A mail migration or a rushed change can quietly weaken them. Every reading records what each one said; weakened, missing, or changed since last time, and you find out. Check one at /tools/email.

A client’s DMARC drops to none during a mail cutover; their invoices start landing in spam a week later.

One alert feed, and a record you can hand the client or your PSA

One subscription can cover a whole client group, so every material change on that client lands in one place. Route it by webhook to the channel your team already reads, or to your own endpoint. The full signed record is available by API and as a CSV export, so the estate feeds the PSA or RMM your desk already runs on, and each client can re-check any line at /verify.

A quarterly review needs proof, not screenshots; the export is a signed record the client verifies.

How it works

1Check a domain now

Run a check on any client domain. No account needed to see it work.

2Load the book, grouped by client

A DRM3 account watches one domain; paid plans raise the count so the whole book rides one watch, grouped by client.

3One feed, your channel

Every material change lands in one place. Send it by webhook to the channel your team already reads, and hand each client a signed export.

See it live What changed today Reachability board Check email security Verify a receipt

How you check it yourself

Every reading is Ed25519 signed the moment it is taken and chained to the one before, against published keys. The verifier checks any receipt in your browser: you hash the short proof path yourself and compare it to the root we published. A signature proves who took a reading and that nobody has changed it since, including us - it does not, on its own, make the reading correct. DomainDrift puts its name on the record, permanently.

Start with one domain

A DRM3 account puts one domain of your choosing under watch, keeps its history, and sends a signed alert the moment we see it change. See a sample report. Paid plans raise the dials; what it costs is on its own page.

Create an account → What it's for

One domain to start. No credit card. Your signed record is yours to keep and verify anywhere.