Domain Monitoring

Know the moment
something breaks.

Continuous monitoring for every email authentication record, mail server, and DNS dependency across all your domains. Alerts fire on state change — not on schedule, not on manual checks.

Domain checks

Run on every managed domain on a schedule. Each check produces a pass, fail, warning, or inconclusive result with a detailed diagnostic.

MXValid mail exchangers, priority ordering, reverse DNS
SPFLookup budget, include chains, syntax errors, missing records
DKIMKey presence, algorithm, key length, selector rotation
DMARCPolicy, subdomain policy, alignment mode, rua/ruf targets
BlacklistsMX IP reputation across 30+ RBLs with delisting guidance
DelegationManaged SPF and DMARC record consistency
MTA-STSPolicy presence, mode, MX alignment
DNSSECChain-of-trust validation, DS/DNSKEY/RRSIG verification
Domain ExpiryRDAP-based expiry tracking, 30/14/7-day alerts

Endpoint monitors

Infrastructure probes beyond DNS. A domain can pass all auth checks while its mail server is returning TLS errors or has an expired certificate.

SMTPMulti-port (25/465/587), STARTTLS/implicit TLS, banner, cert expiry
HTTPSUptime, response time, TLS certificate expiry
PingIP-level reachability for MX hosts
TCP PortCustom port checks for any infrastructure endpoint
PTR / Reverse DNSFCrDNS verification for mail server IPs

How it works

Change detection

Every check is fingerprinted. When a record changes — intentionally or not — mxio detects it and records what changed, what it was before, and when.

Incident lifecycle

Failed checks open incidents automatically. Incidents track state (open, acknowledged, resolved), notify on escalation, and auto-close when the check passes again.

Scheduled alerts

Get notified by email when checks fail. Alert channels and escalation timing are configurable per domain. No alert fatigue — notifications fire on state changes, not every poll cycle.

Check frequency by plan

Free: daily. Monitoring Starter and Core: every 6 hours. Pro: every 30 minutes. Business: every 5 minutes. Frequency matches the stakes — catching a blacklisting in 5 minutes vs. a day is not the same outcome.

Domain health score

A single aggregated score per domain weighted by check severity. Useful for prioritizing which domain needs attention first when you're managing dozens.

Endpoint monitors

Monitors are not limited to DNS. Add SMTP endpoints, HTTPS services, and TCP ports. A mail server that passes DMARC but has an expired TLS cert is still broken.

Plans that include monitoring

Free$01 domain · Daily · 5 endpoints
Monitoring Starter$19/mo5 domains · Every 6h · 25 endpointsBest for monitoring-first teams
Core$34/mo5 domains · Every 6h · 25 endpointsMonitoring + DMARC Reporting
Pro$59/mo25 domains · Every 30min · 125 endpointsIncludes Managed SPF
Business$129/mo50 domains · Every 5min · 250 endpoints

Free one-off checks

No account needed. Run any check against any domain right now.

Also from mxio

Start monitoring your domains

Free plan includes one domain with daily checks. No credit card required.

Create free account