DomainDrift 0.86: watch a whole portfolio, and read the day's drift each morning

DomainDrift watches 100,000+ domains and records what their infrastructure is doing: DNS, certificates, mail posture, registration, reachability. Every observation is signed the moment it is made, and when a field moves, the change is the event: what it was, what it became, and when we saw it.

The July wave up to 0.80 put the checks in your hands. This wave, through 0.86, turns watching a single domain into watching a whole portfolio, and gives that portfolio a morning brief, alerts, and a report you can hand to someone else.

The day's drift, every morning

Group the domains you actually care about: your own portfolio, your vendors, your competitors. Every morning, DomainDrift writes one brief for the group that gathers everything that drifted across all of its domains in the last day, each change carrying its signed receipt. A nameserver that moved, a certificate that reissued, a mail record that changed: it is all in one place, already read for you.

The first brief looks back, not just forward, so a group you added yesterday starts with a picture of what has been moving instead of a blank page.

Alerts when your mail posture weakens

Email authentication is where quiet, costly drift hides. DomainDrift now watches it directly. When a domain's DMARC policy is downgraded, its SPF record is weakened, a DKIM key is removed, or MTA-STS is dropped, that change becomes an alert, not a line you had to go looking for.

These are observations of the domain's own published records, signed at the moment they are read. The alert tells you what changed and when it was seen, so a weakening you did not authorize is something you hear about the same day.

Watch a provider, not just a domain

Sometimes the question is not about one domain but about one provider. DomainDrift can now watch a certificate authority, a mail host, or a DNS operator across everything it tracks, and show how that provider is moving: which domains arrived on it and which left, day by day. It turns a single provider into a subject you can follow.

A signed report you can hand over

For any group, DomainDrift can produce a signed report of its current state and recent drift. Every line in it carries a receipt, and the report as a whole verifies against the published signing keys, in a browser, offline. It is written once and kept permanently, so the version you hand over today still verifies later.

Every line traces back to the exact signed observation it came from, so the auditor, client, or counterparty you hand it to can check any of them without asking you for anything.

Plans, and a free tier that stays

All of this sits behind plans, which are now live. They run from $9 to $249 a month and open up domain groups, the morning brief, the drift alerts, provider watch, signed reports, and a larger API allowance, sized from a single portfolio up to a reseller managing many.

The free tier stays free: sign in to open full domain pages, watch five domains of your own, keep a group, and use the API within a free allowance. Start at domaindrift.io: search a name you know, open its page, and see what has moved.