ZoneWatcher
ZoneWatcher monitors DNS records for changes and sends alerts, typically checking each zone every five minutes.
What ZoneWatcher is
ZoneWatcher monitors DNS records for changes and sends alerts, typically checking each zone every five minutes. It also watches Certificate Transparency logs for new certificate issuances and tracks certificate expiration. Protect and Control plans add AI DNS risk assessment, similar-domain detection, enhanced zone health checks, and DNSSEC validation monitoring. Control adds beta DNS change management, rollback, propagation monitoring, and configurable check intervals. Alerts can go to email, Slack, Microsoft Teams, Discord, webhooks, GitHub Issues, Jira, or HaloPSA. The service connects to DNS provider APIs and offers a Public DNS provider for domains whose providers lack a supported API. Monitoring plans use read-only access; write access is needed only for Control change management and rollback. Prices are per domain, with a five-domain minimum: Monitor is $1.40 a month, Protect is $2.50 a month, and Control is $4 a month. Customers monitoring more than 5,000 domains are directed to request a custom plan. ZoneWatcher offers a 7-day trial, but no free plan.
Good
- DNS records are checked typically every five minutes.
- Certificate issuance and expiration are monitored.
- Alerts reach email, chat, issue trackers, and webhooks.
- Two-factor authentication with TOTP is available to every user.
Watch out
- There is no free plan.
- All plans require a five-domain minimum.
- More than 5,000 domains require a custom plan.
- ZoneWatcher is not currently SOC 2 certified.
Who it suits
It suits teams responsible for DNS changes, certificate status, and domain health. Control may fit teams that need change management and rollback, while smaller monitoring setups can compare the three per-domain plans.
Verdict
ZoneWatcher pairs DNS and certificate monitoring with several alert channels and tiered controls. Consider the five-domain minimum, per-domain pricing, and plan-specific features when selecting a tier.
Plans and prices
From ZoneWatcher's own pricing page, checked 1 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Monitor | $1.40 a month | 5 domain minimum · 10 team members · 1-year data retention · API access 60 req/min · per domain |
| Protect | $2.50 a month | 5 domain minimum · unlimited team members · 5-year data retention · API access 150 req/min · per domain |
| Control | $4 a month | 5 domain minimum · unlimited team members · 7-year data retention · API access 500 req/min · priority support · per domain |
| Monitor | $14 a year | 5 domain minimum · 10 team members · 1-year data retention · API access 60 req/min · per domain |
| Protect | $25 a year | 5 domain minimum · unlimited team members · 5-year data retention · API access 150 req/min · per domain |
| Control | $40 a year | 5 domain minimum · unlimited team members · 7-year data retention · API access 500 req/min · priority support · per domain |
The facts
Each one read from ZoneWatcher's own pages, with the date it was checked.
What it does
- Audit reporting
- Protect and Control plans include PDF compliance reports, with change history retention of five years and seven years respectively.checked 1 Oct 2026
- Certificate monitoring
- The service monitors Certificate Transparency logs for new certificate issuances and tracks certificate expiration.checked 1 Oct 2026
- Change governance
- The Control plan provides beta DNS change management, rollback, propagation monitoring, and configurable check intervals.checked 1 Oct 2026
- Compliance status
- ZoneWatcher is not currently SOC 2 certified but says its controls operate according to the SOC 2 Trust Services Criteria.checked 1 Oct 2026
- DNS monitoring
- ZoneWatcher continuously monitors DNS records and alerts on changes, typically checking each zone every five minutes.checked 1 Oct 2026
- Notifications
- Supported notification channels include email, Slack, Microsoft Teams, Discord, webhooks, GitHub Issues, Jira, and HaloPSA.checked 1 Oct 2026
- Provider integrations
- ZoneWatcher integrates with DNS provider APIs and offers a Public DNS provider for domains whose providers lack a supported API.checked 1 Oct 2026
- Read-only operation
- Monitoring plans use read-only access, while write access is required only for Control-plan change management and rollback.checked 1 Oct 2026
- Scale limit
- Customers monitoring more than 5,000 domains are directed to contact ZoneWatcher for a custom plan.checked 1 Oct 2026
- Security controls
- Provider credentials receive application-level AES-256 encryption, customer traffic uses TLS, and two-factor authentication with TOTP is available to every user.checked 1 Oct 2026
- Security intelligence
- Protect and Control plans include AI DNS Risk Assessment, similar-domain detection, enhanced zone health checks, and DNSSEC validation monitoring.checked 1 Oct 2026
- Support
- ZoneWatcher provides support at [email protected], and the Control plan includes priority support.checked 1 Oct 2026
The company
- Founded
- 2016checked 28 Sep 2026
Alternatives to ZoneWatcher
- 1
Dotcom-Monitor
Free planAndroidiOSWebAPI8.3From $13.33 a month - 2
Nagios XI
Free planWebAPILinuxmacOS8.1$2,595 one-time - 3
TLDTrack
Free planAndroidiOSWebAPI8.0From $11 a month - 4
Visual Sentinel
Free planAndroidiOSWebAPI8.0From $6 a month - 5
Paessler PRTG Network Monitor
Free planAndroidiOSWebAPI7.7From $200 a month - 6
Domain Monitor
Free planAndroidWebAPI7.6From £6.39 a month