Changelog

Everything that shipped, dated. Only what is already live — nothing here is a plan.

• Sep 2, 2026 infrastructure

  Webhook signature header is now X-Quathos-Signature

  Alert webhooks were carrying the signature in two headers during the rebrand — X-Quathos-Signature and the former X-Qflaryx-Signature — with the same value. From today only X-Quathos-Signature is sent. The signature, the secret and the t=<timestamp>,v1=<hash> format did not change: if your endpoint validates the old header by name, point it at the new one. The possession TXT record also moved to _quathos-verify; records already published as _qflaryx-verify keep working, with no action needed.

• Aug 30, 2026 feature

  Monitor now tells you when the site is down

  A tenth check, "server answering (HTTP)": we request the domain at the interval of your plan and alert when it stops responding — confirmed twice before alerting, and only after we have seen it up at least once, so a domain with no website never becomes a false alarm. One probe from one location, not a multi-region uptime monitor. The watched-domain quota is now on the pricing page as well.

• Aug 25, 2026 feature

  Monitor: watch domains hosted anywhere

  Prove ownership with a TXT record and we watch the domain without any nameserver change: delegation, DNSSEC chain and signature expiry, SPF/DMARC/MX, registration expiry and registry holds, the TLS certificate and certificates issued in CT logs. Alerts go out only on transitions, and "this was expected" stops a legitimate change from alerting again. Domains already served here are watched for free on every plan.

• Jul 27, 2026 feature

  Secondary DNS now starts at Growth

  Replicating a zone from your own primary over AXFR/IXFR with TSIG used to require the Scale plan. It now comes with Growth. Existing subscribers get it automatically — nothing to do.

• Jul 27, 2026 feature

  Email security wizard (SPF and DMARC)

  Pick your email provider and we write the records. The diagnosis also counts the DNS lookups your SPF requires — above 10 it silently stops working, and that is the most common SPF failure. DKIM is detected, never generated: the key belongs to your provider.

• Jul 27, 2026 feature

  Audit log

  Every change made in your organization — who, what, when, and the before/after. The record of a deleted item survives the item itself, which is the case people look up most.

• Jul 27, 2026 feature

  Seven new record types, including editable DS

  TLSA, SSHFP, SVCB, HTTPS, NAPTR, LOC and DS. The DS is what lets you delegate a subdomain to another operator while keeping the DNSSEC chain intact.

• Jul 27, 2026 feature

  Team invitations

  Invite people by email, set roles and revoke pending invitations. A pending invitation takes a seat on your plan until accepted or revoked — so the limit you see is the limit that applies.

• Jul 27, 2026 feature

  Query analytics

  Volume, most queried names and record types per zone, with retention by plan. There is no rcode breakdown: our current capture records the question, not the answer — and we do not publish numbers we do not measure.

• Jul 27, 2026 security

  Per-plan API rate limits are now enforced

  The requests-per-hour figure in the pricing table was published but never enforced. It is now applied per organization, with Retry-After on the 429 so automation knows how long to wait.

• Jul 27, 2026 infrastructure

  Readiness checks real dependencies

  /ready used to answer "yes" unconditionally. It now checks database, cache and the DNS backend, and returns 503 naming the component that failed — so a degraded instance stops receiving traffic instead of serving errors.

• Jul 26, 2026 feature

  Public status page

  Uptime and latency measured continuously and published as they are, including the days they look bad. A day that was not measured shows grey, never green.