You know first.
We watch the nameservers, DNSSEC, SPF/DMARC, the certificate, registration expiry and whether the site answers — at any provider, with no nameserver change. When something moves, the alert goes out right away.
No credit card · 1 domain watched on Free, forever
Ten checks, four fronts
DNS, registry, TLS and availability
No nameserver change
we watch the domain where it already lives
E-mail and webhook alerts
when the state changes, not in a monthly report
How it works
Add the domain
Any domain, at any provider. We read what it publishes today and keep it as the baseline.
Prove it is yours
Publish the TXT record we show in the dashboard. It is the only manual step — and the last one.
You get the alert alerted
Nameserver, DNSSEC, e-mail records, certificate or expiry date moved: the alert goes out by e-mail and webhook.
What we watch
Nameservers
Delegation checked at the parent NS — if the domain stops pointing where it should, you know.
DNSSEC
DS↔DNSKEY chain and signature validity, before a resolver refuses the domain.
SPF, DMARC and MX
What changes in your e-mail without anyone saying so — and quietly breaks delivery.
Registration expiry
The date RDAP publishes, followed early enough to renew.
Certificate and CT logs
TLS expiry, and certificates issued for your domain that you never asked for.
Is it up?
The HTTP answer, from one observation point — we do not claim more than that.
Certificates per host
api., mail., panel.: the certificate each host serves, discovered from your zone and CT logs. Expiry at 30 and 7 days; a new issuer alerts, a renewal does not.
Is the service up?
Tick what each host serves — website or API, webmail (login page + IMAP), incoming e-mail (SMTP) — and we tell you when it stops answering. No ports to fill in, no agent to install, and we never sign in to your services.
Status page
A public page at /s/your-name with the state of what we watch and the incidents you write. 90 days of history from the alerts already recorded.
Alerts and webhooks
E-mail and signed webhook, with the previous state next to the new one.
Authoritative DNS, if you want
Record editor, DNSSEC in 1 click, BIND import, ALIAS at the apex, query analytics and secondary DNS — same plan.
API-first
Everything the dashboard does, the API does: add the watched portfolio, read the state of every check, receive the signed webhook.
See the API →curl -X POST https://api.monitor.quathos.com/v1/orgs/1/watched-domains \ -H "Authorization: Bearer qfx_..." \ -d '{"names":["exemplo.com"]}' # → 201 · domain added · first check within minutes
Plans
Free
For your domain and your side projects.
- 1 domain watched · once a day
- All 10 checks, from day one
- 5 certificate hosts · 2 service checks · 1 status page
- 5 DNS zones included
- 500 records
- Full API
Starter
For people who ship for a living.
- Everything in Free, plus:
- 5 domains watched · every 6 h
- 10 DNS zones
- 2,500 records
- Full CNAME flattening
- E-mail support
Growth
For teams and agencies with many domains.
- Everything in Starter, plus:
- 25 domains watched · every 15 min
- 25 certificate hosts · 15 service checks per domain · 3 status pages
- Alert webhooks
- 50 DNS zones
- 10,000 records
- 15 members
Scale
For a large portfolio and answers in minutes.
- Everything in Growth, plus:
- 100 domains watched · every 5 min
- 200 DNS zones
- 50,000 records
- 99.99% SLA
- Secondary DNS (early access)
Enterprise
For when the domain is mission-critical.
- Everything in Scale, plus:
- Portfolio and cadence under contract
- Secondary DNS (TSIG)
- Multi-signer DNSSEC
- Contractual SLA
- Dedicated 24/7 support
Compare all features ↓
| Free | Starter | Growth ★ | Scale | Enterprise | |
|---|---|---|---|---|---|
| Price/month | $0 | $5 | $25 | $90 | On request |
| Annual (equiv./mo) | — | $4 | $21 | $75 | contract |
| Domains watched | 1 | 5 | 25 | 100 | Unlimited |
| Check interval | 24 h | 6 h | 15 min | 5 min | Custom |
| Checks per domain | All 10 | All 10 | All 10 | All 10 | All 10 |
| E-mail alerts | ✓ | ✓ | ✓ | ✓ | ✓ |
| Alert webhooks | — | — | ✓ | ✓ | ✓ |
| Certificate hosts per domain | 5 | 10 | 25 | 100 | Unlimited |
| Service checks per domain | 2 | 5 | 15 | 50 | Unlimited |
| Status pages | 1 | 1 | 3 | Unlimited | Unlimited |
| Components per status page | 3 | 5 | 15 | Unlimited | Unlimited |
| DNS zones included | 5 | 10 | 50 | 200 | Unlimited |
| DNS records (org) | 500 | 2,500 | 10,000 | 50,000 | Unlimited |
| Record types | All | All | All | All | All |
| DNSSEC | ✓ | ✓ | ✓ | ✓ | ✓ + multi-signer |
| ALIAS at the apex | ✓ | ✓ | ✓ | ✓ | ✓ |
| Full CNAME flattening | — | ✓ | ✓ | ✓ | ✓ |
| Import (quick scan + BIND) | ✓ | ✓ | ✓ | ✓ | ✓ + assisted |
| Query analytics | 24 h | 7 days | 30 days | 90 days | 12 months |
| API — rate limit | 1,200 req/h | 6,000 req/h | 30,000 req/h | 120,000 req/h | Custom |
| Org members | 3 | 5 | 15 | Unlimited | Unlimited + advanced RBAC |
| Audit log | 7 days | 30 days | 90 days | 1 year | Unlimited |
| Priority propagation | — | — | ✓ | ✓ | ✓ |
| Secondary DNS (TSIG) | — | — | — | Early access | ✓ |
| Subdomain delegation | — | — | — | — | ✓ |
| Advanced zone holds | — | — | — | — | ✓ |
| SLA | — | — | — | 99.99% | Contractual + credits |
| Support | Community | Priority e-mail | Priority + Slack | Dedicated 24/7 + onboarding |
Frequently asked questions
Do I have to change my nameservers to be watched? +
No. The Monitor reads what your domain publishes in public DNS, in RDAP and over TLS, wherever it is hosted. Changing nameservers is only needed if you also want the authoritative DNS here.
What does the Monitor watch, and what counts against the quota? +
Nameservers, the DNSSEC chain, SPF/DMARC/MX, registration expiry, the TLS certificate, certificates issued in CT logs and whether the server answers HTTP. Under each domain you can also watch what its hosts serve — website or API, webmail (login page + IMAP) and incoming e-mail (SMTP). Domains served here are watched for free on every plan; only external domains count. If you downgrade, nothing is switched off — we keep watching at the new interval and only block adding more.
How many places do you measure from? +
One observation point today — and it is published on the status page. A domain that answers us may still be down on another network, so "is it up?" is a signal, not an SLA. The same holds for the service checks; when a host does not answer on port 25, we probe a third-party mail server too, and if that one is silent as well we say "not measured" instead of blaming your server. The DNS, registry and TLS checks do not depend on geography.
Do you keep history and charts? +
No. We keep the current state and the previous one for each check: what changed, and when. There is no time series and no chart, by design — the product is the alert, not the dashboard.
Is Free really free forever? +
Yes. 1 domain watched, 5 DNS zones and 500 records, no credit card. If you go over, nothing breaks — your zones keep resolving and we keep watching; we only block creating more.
Can I change plans whenever I want? +
Yes — instant upgrades with prorated billing; downgrades at the end of the cycle.
Do you register domains? +
No. Your domain stays at your registrar. We watch it there, and we only answer for it if you point the nameservers here.
What if I cancel? +
Your zones continue on the Free plan (within its limits) or you export everything in BIND format. No lock-in.
Is there a trial for paid plans? +
14 days on Starter, no credit card — one trial per organization. Growth and Scale you buy directly, with prorated upgrades at any time.
Our numbers, not our adjectives
We have no client logos to show and no analyst badge to borrow. What we do have is what we measure — published continuously, including on the days it looks bad.
- Service uptime (90 days)
- 99.921%
- Fastest nameserver, p50 (24 h)
- 3 ms
- Observation points
- 1
Measurements since Aug 5, 2026.