SSL, domain & DNS monitoring for IT teams and MSPs

NOTHING.
EXPIRES.
UNNOTICED.

DomainCat watches your domains and SSL certs so you don't have to — including the origin cert hiding behind Cloudflare. WHOIS expiry, DNS health, SPF, DMARC, blacklists — all in one dashboard.

Try the free checker →
5domains free
2clocks — cert + domain
30/14/7day alerts
domaincat.app — All Domains
DomainSSL ExpiryDomain ExpStatus
domaincat.app89d312d
Healthy
api.startup.io14d202d
Warning
legacyapp.comEXPIRED104d
Expired
dev.shopco.io6d153d
Critical
740ft.com245d338d
Healthy

Never get caught by an expired cert or a domain that silently lapsed

What's covered

Domain health is more than just SSL.

Certs are one clock. Your domain registration is another. Then there's DNS, email deliverability, blacklists, and security headers. DomainCat watches all of it.

SSL

SSL Certificate Monitoring

Issuer, expiry, SANs, chain validity. Auto-detects renewal. Checked every 6 hours, or every hour on MSP. Monitor a raw IP or a hostname.

New

Origin Cert Monitoring (behind Cloudflare)

Behind a CDN, the padlock browsers see is Cloudflare's edge cert — your real origin cert can expire silently. DomainCat watches the origin too, and tells you honestly when it can't.

Domain

Domain Registration Health

WHOIS lookup, registrar info, and domain expiry tracked separately from your cert. Two clocks, both visible.

DNS

Live DNS Lookup

A, AAAA, MX, CNAME, NS records on demand. HTTP redirect chain and security headers included.

Email

Email Deliverability

SPF validation, DKIM detection, DMARC policy, and blacklist lookups across major RBLs.

MSP

MSP Workflow

Separate views for your domains vs. client domains. Alert the cert owner directly when it's not yours to renew.

AI + API

Ask your AI about your certs

Built-in MCP server: Claude, Cursor or VS Code can answer “what expires this month?” and add domains for you — with scoped, revocable keys. Plus a REST API with Grafana output.

Listed in Claude’s connector directory →

Simple pricing

No surprises. Just like your domains.

Free

5 domains, checked every 6 hours. No card required.

$0/mo
  • ✓5 domains
  • ✓SSL + origin cert checks every 6 hours
  • ✓Email alerts at 30 / 14 / 7 days
  • ✓Full domain detail view
  • ✓Read-only AI assistant key (MCP)
Best for most

Pro

50 domains, plus domain-expiry and blacklist alerts.

$12/mo
  • ✓50 domains
  • ✓Domain expiry + blacklist alerts
  • ✓Slack, Teams + webhook alerts
  • ✓Up to 5 team members
  • ✓AI assistants: read + write MCP keys
  • ✓API + Grafana output

MSP

Unlimited domains, hourly checks, change + owner alerts.

$29/mo
  • ✓Unlimited domains
  • ✓Hourly checks
  • ✓DNS, WHOIS + header change alerts
  • ✓Alert the cert owner directly
  • ✓PagerDuty alerts
  • ✓Everything in Pro

Questions

How is this different from MxToolbox?

MxToolbox is great for one-off lookups. DomainCat keeps watching: every domain is re-checked every 6 hours (hourly on MSP) and you get alerted before an SSL cert or domain registration expires, including the origin cert behind Cloudflare. Plans start free, then $12/mo.

How does origin cert monitoring work?

No magic: we don't see through Cloudflare. You tell us your origin server's IP or hostname (or import it from Cloudflare with a read-only token, or confirm one we suggest). We connect to it directly and read its certificate. If your origin only accepts Cloudflare's IPs, allowlist our prober IP. If we can't reach it, it shows amber with the reason, never a fake green. Cloudflare Tunnel setups have no reachable origin, so we can't check those. The free checker only sees the edge cert.

Do I need to install anything?

No. Every check runs from our servers against your public endpoints. Add a domain and results show up in seconds.

How often are domains checked?

Every hour on MSP, every 6 hours on Free and Pro. SSL expiry alerts go out at 30, 14 and 7 days, then daily once a cert has expired.

Where do alerts go?

Email on every plan. Pro adds Slack, Microsoft Teams and generic webhooks. MSP adds PagerDuty and can alert the cert owner directly, so your client hears about their own cert.

What happens when I hit my domain limit?

You can still see everything you've added. You just can't add new domains until you upgrade or remove some.

What data do you store?

Only the domains you add and the public results of checking them (certificates, DNS, WHOIS). Sign-in is handled by Auth0 and payments by Stripe. We never see your card number.

Can I cancel anytime?

Yes. Cancel in Settings → Billing. Your plan stays active until the end of the current billing period.

“Built by an infrastructure manager who got paged for one expired cert too many.”

— THE FOUNDER, 740FT

Start watching in minutes.

Free plan. No card. Add your first domain and see exactly what DomainCat finds.

Try check.domaincat.app →
DomainCat
Hi! How can I help you today?