Change monitoring for your public surface

Know what changed.

Continuous monitoring for certificates, DNS and agent endpoints. See the exact diff when anything changes.

Recent changes

6

Illustrative sequence · one change per check

18 minutes ago Issuing CA changed
changed expiry_bucket
was lte_14d now lte_90d

chain

leaf

changed fingerprint
was 9e4c2a0f8d6b4e2c0a8f6d4b2e0c8a6f4d2b0e8c6a4f2d0b8e6c4a2f0d8b6e4c now 51d8a3f6c0e9b2d7a4f1c8e5b0d3a6f9c2e7b4d1a8f5c0e3b6d9a2f7c4e1b8d5
changed issuer
was Let's Encrypt / R11 now Google Trust Services / WE1
changed not_after
was 2026-10-02T00:00:00Z now 2026-12-17T00:00:00Z
changed not_before
was 2026-07-04T00:00:00Z now 2026-09-18T00:00:00Z
changed spki_sha256
was 3f1a9c0e7b2d4f6a8c1e3b5d7f9a0c2e4b6d8f1a3c5e7b9d0f2a4c6e8b1d3f5a now b72e5d1c9a4f8e3b6d0c2a7f5e1b9d4c8a3f6e0b2d7c5a1f9e4b8d3c6a0f2e7b
1 hour ago Content-Security-Policy removed

headers

changed content_security_policy
removed { "default-src": [ "'self'" ], "script-src": [ "'self'", "cdn.shop.example.com" ] }added absent
6 hours ago Records changed
changed records
removed 192.0.2.35 added 198.51.100.35
1 day ago Post-quantum turned on
added hybrid_group
now X25519MLKEM768
changed hybrid_supported
was false now true
changed preferred_group
was X25519 now X25519MLKEM768
2 days ago Tool added

tools

fetch_site_mapadded

added description
now Fetch the site map as a list of page URLs.
2 days ago Price changed

accepts

eip155:8453|0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

changed amount
was 50000 now 100000
See what each check does

Example observations, not live results.

Try it on any domain.

The usual checks

Newer, and rarely watched

No sign-up required.[scan queues, does not run]

api.example.com
Healthy
TLS
Valid (11 days)
Security headers
HSTS and CSP sent
DNS
3 A records
robots.txt
Present
PQC
TLS 1.3 (X25519)
MCP
Not enabled
Agent Card
Valid
x402
Not enabled
Last checked
3 minutes ago

Sample results. Run a check to see your own.

01

What changed.

See exactly what changed, with clean comparisons that make sense. No noise, just what matters.

TLS comparison Example change
changed expiry_bucket
was lte_14d now lte_90d

chain

leaf

changed fingerprint
was 9e4c2a0f8d6b4e2c0a8f6d4b2e0c8a6f4d2b0e8c6a4f2d0b8e6c4a2f0d8b6e4c now 51d8a3f6c0e9b2d7a4f1c8e5b0d3a6f9c2e7b4d1a8f5c0e3b6d9a2f7c4e1b8d5
changed issuer
was Let's Encrypt / R11 now Google Trust Services / WE1
changed not_after
was 2026-10-02T00:00:00Z now 2026-12-17T00:00:00Z
changed not_before
was 2026-07-04T00:00:00Z now 2026-09-18T00:00:00Z
changed spki_sha256
was 3f1a9c0e7b2d4f6a8c1e3b5d7f9a0c2e4b6d8f1a3c5e7b9d0f2a4c6e8b1d3f5a now b72e5d1c9a4f8e3b6d0c2a7f5e1b9d4c8a3f6e0b2d7c5a1f9e4b8d3c6a0f2e7b

02

Historical evidence.

A complete timeline of changes, so you can trace what happened, when, and why.

Change history Example timeline
18 minutes ago TLS · Issuing CA changed
1 hour ago Security headers · Content-Security-Policy removed
6 hours ago DNS · Records changed
1 day ago PQC · Post-quantum turned on
2 days ago MCP · Tool added
2 days ago x402 · Price changed

03

Simple, predictable pricing.

Upgrade for faster checks and more monitors. No overages.

Free

For personal domains and side projects.

€0 [price is copy, not from billing]

  • 5 monitors
  • Checks daily
  • 1 seat
  • Email, Slack and webhook alerts
  • History[retention not in plan limits]

Starter

For solo developers with production domains.

€9 / month[price is copy, not from billing]

  • 5 monitors
  • Checks hourly
  • 5 seats
  • Email, Slack and webhook alerts
  • History[retention not in plan limits]

Pro Recommended

For teams running production services.

€25 / month[price is copy, not from billing]

  • 20 monitors
  • Checks every 5 minutes
  • 10 seats
  • Email, Slack and webhook alerts
  • History[retention not in plan limits]
Start 14-day trial

No credit card required.

Enterprise

For larger fleets and custom needs.

Custom

Contact sales[no contact channel yet]