Complete DNS Security Plans That Scale With Your Business
DNS monitoring, WHOIS tracking, and brand protection. Start with 10 domains. Add more as you grow. No limits, no contracts.
Personal
Essential DNS security for individuals and small businesses
-
DNS record change monitoring & instant alerts
-
Nameserver sync verification
-
Domain expiration monitoring & alerts
-
SSL certificate expiration monitoring & alerts
-
Expiration dashboard with urgency levels
-
Security Center with 30+ automated checks
-
RFC-compliance recommendations
-
Out-of-sync nameserver notifications
-
Daily backups (BIND, CSV, PowerDNS)
-
Historical data & audit trails (1 year)
-
CNAME resolution tracking
-
Email notifications
Enterprise
Complete DNS security suite for growing businesses and enterprises
-
Everything in Personal, plus:
-
Monitor up to 100 domains (expandable)
-
SSL/TLS security audits (weak keys, expired certs, invalid chains, self-signed detection)
-
SSL certificate hostname mismatch detection
-
Deprecated TLS protocol detection
-
Phishing Sentinel brand protection with SSL intelligence
-
DNSSEC validation
-
Dangling CNAME detection
-
Comprehensive email security checks (SPF/DKIM/DMARC deep analysis)
-
Advanced notifications (Slack, Discord, PagerDuty)
-
Team management & role-based access
-
Enterprise API & MCP server for AI agents (Claude, ChatGPT) — 50+ tools
-
Add-on domain packs (50 domains each)
-
Priority support
All Plans Include Essential DNS Security
Purpose-built features for MSPs who need to monitor DNS at scale
Complete DNS Record Monitoring
Monitor all DNS record types (A, AAAA, MX, CNAME, TXT, etc.) around the clock with instant change notifications.
Nameserver Sync Verification
Ensure all authoritative nameservers are aligned and serving consistent data. Detect out-of-sync records across nameservers instantly.
Domain Expiration Monitoring
Track when your domain registrations expire with urgency-based alerts at 90, 30, and 7 days before expiry.
SSL Certificate Expiration Monitoring
Automatic discovery and tracking of SSL certificates across your domains with expiration alerts before they lapse.
Security Center with 30+ Automated Checks
Comprehensive security analysis covering DNS records, connectivity, performance, and resilience — all automated and continuously monitored.
Real-Time Security Alerts
Get instantly notified of DNS changes, domain expirations, SSL certificate issues, and security check failures.
Complete Change History & Audit Trails
Track what changed and when with downloadable BIND, CSV, and PowerDNS exports. History retained for a full year.
RFC Compliance Recommendations
Spot RFC violations and risky configurations that could create security vulnerabilities. Get actionable recommendations.
Enterprise-Only Advanced Security Features
Purpose-built features for MSPs who need to monitor DNS at scale
SSL/TLS Security Audits
Detect weak keys, expired certificates, self-signed certs, invalid chains, deprecated TLS protocols, and hostname mismatches across all your domains.
Phishing Sentinel Brand Protection
Detect lookalike domains targeting your brand with SSL certificate intelligence for comprehensive threat assessment.
DNSSEC Validation
Verify DNSSEC signing is properly configured and valid, ensuring DNS responses haven't been tampered with.
Dangling CNAME Detection
Identify CNAME records pointing to resources that no longer exist, preventing subdomain takeover attacks.
Comprehensive Email Security Analysis
Deep analysis of SPF, DKIM, and DMARC configurations to protect your domains from email spoofing and phishing.
Advanced Notifications & Integrations
Connect with Slack, Discord, PagerDuty, and custom systems. Get alerts where your team already works.
Team Management & Role-Based Access
Multi-user access with role-based permissions and collaborative monitoring workflows for growing teams and MSPs.
Priority Support
Faster response times and dedicated support channels for enterprise customers.
Pricing & Features FAQ
Everything you need to know about DNS Spy
- What does the Security Center check?
- The Security Center runs 30+ automated security checks across your domains, covering DNS record configuration (SPF, DMARC, DNSSEC, CAA), nameserver connectivity and redundancy, performance benchmarks, and resilience analysis. Every check runs continuously and alerts you when something fails. Enterprise plans add advanced SSL/TLS security audits, email security deep analysis, DNSSEC validation, and dangling CNAME detection.
- How does SSL certificate monitoring work?
- DNS Spy automatically discovers SSL certificates across all your monitored domains. We track certificate expiration dates and send urgency-based alerts at 90, 30, and 7 days before expiry — so you never get caught with an expired certificate that breaks HTTPS for your users. Enterprise plans add deeper SSL/TLS security audits that check for weak keys, self-signed certificates, invalid certificate chains, deprecated TLS protocols, and hostname mismatches.
- How does domain expiration monitoring work?
- We monitor domain registration data and track when your domain registrations are set to expire. You receive automated alerts at 90, 30, and 7 days before expiry, giving you plenty of time to renew. The expiration dashboard shows all upcoming expirations across your entire portfolio sorted by urgency — essential for MSPs managing hundreds of client domains.
- What is Phishing Sentinel and how does it protect my brand?
- Phishing Sentinel is an Enterprise-only brand protection feature that automatically discovers and monitors domain variants that could be used for phishing attacks targeting your organization. It detects typosquatting, homograph attacks, and other lookalike domains, then cross-references them with SSL certificate intelligence to assess threat severity. You get alerted when active threats are found so you can take action before your customers are impacted.
- What SSL/TLS security issues does Enterprise detect?
- Enterprise plans include six specialized SSL/TLS security checks: weak cryptographic keys, self-signed certificates, invalid certificate chains, expired certificates, deprecated TLS protocol versions (like TLS 1.0/1.1), and SSL certificate hostname mismatches. These checks run automatically and continuously across all your domains, alerting you the moment a security issue appears.
- Can I try all Enterprise features before committing?
- Yes! The 7-day free trial gives you full access to every Enterprise feature including SSL/TLS security audits, Phishing Sentinel brand protection, DNSSEC validation, advanced notification channels (Slack, Discord, PagerDuty), and team management. No credit card required to start. After the trial, choose the plan that fits your needs.
- What notification channels are supported?
- All plans include email notifications for DNS changes, security check failures, and expiration alerts. Enterprise plans add advanced notification channels including Slack, Discord, and PagerDuty — so alerts go directly where your team already works. You can configure which alert types go to which channels for fine-grained control.
- Can I start with 100 domains on Enterprise and add more later?
- Absolutely. Enterprise plans start with 100 domains and you can add 50-domain packs anytime — instantly and without a cap. There is no maximum limit. This makes Enterprise ideal for growing MSPs and agencies that onboard new client domains regularly.
- Can I add more than 10 domains to Personal plans?
- Personal plans are limited to 10 domains. If you need to monitor more than 10 domains, upgrading to Enterprise gives you 100 domains with the ability to add 50-domain packs as you grow. Enterprise also unlocks advanced security features like SSL/TLS audits and Phishing Sentinel.
- Can I monitor domains for multiple clients or teams?
- Yes. DNS Spy is built for MSPs, agencies, and enterprises managing domains across multiple clients. Enterprise plans include team management with role-based access, so you can organize monitoring by client, assign team members, and maintain separate workflows. The dashboard gives you a single-pane view across your entire domain portfolio.
- Is there a money-back guarantee?
- Yes. We offer a 7-day money-back guarantee on all paid plans. If DNS Spy doesn't meet your needs, contact us within 7 days of subscribing for a full refund — no questions asked.
- How do I manage my subscription and billing?
- You can manage everything from your DNS Spy dashboard. View your current domain usage, add domain packs, and access the Stripe billing portal to update payment methods, view invoices, and change your plan — all in a few clicks.
Start Monitoring Smarter with Complete DNS Security
DNS monitoring, SSL certificate tracking, domain expiration alerts, and 30+ automated security checks. Choose your plan and start protecting your domains today.
Features
Resources