SSL, domain & DNS monitoring for IT teams and MSPs
DomainCat watches your domains and SSL certs so you don't have to — including the origin cert hiding behind Cloudflare. WHOIS expiry, DNS health, SPF, DMARC, blacklists — all in one dashboard.
Never get caught by an expired cert or a domain that silently lapsed
What's covered
Certs are one clock. Your domain registration is another. Then there's DNS, email deliverability, blacklists, and security headers. DomainCat watches all of it.
Simple pricing
5 domains, checked every 6 hours. No card required.
50 domains, plus domain-expiry and blacklist alerts.
Unlimited domains, hourly checks, change + owner alerts.
MxToolbox is great for one-off lookups. DomainCat keeps watching: every domain is re-checked every 6 hours (hourly on MSP) and you get alerted before an SSL cert or domain registration expires, including the origin cert behind Cloudflare. Plans start free, then $12/mo.
No magic: we don't see through Cloudflare. You tell us your origin server's IP or hostname (or import it from Cloudflare with a read-only token, or confirm one we suggest). We connect to it directly and read its certificate. If your origin only accepts Cloudflare's IPs, allowlist our prober IP. If we can't reach it, it shows amber with the reason, never a fake green. Cloudflare Tunnel setups have no reachable origin, so we can't check those. The free checker only sees the edge cert.
No. Every check runs from our servers against your public endpoints. Add a domain and results show up in seconds.
Every hour on MSP, every 6 hours on Free and Pro. SSL expiry alerts go out at 30, 14 and 7 days, then daily once a cert has expired.
Email on every plan. Pro adds Slack, Microsoft Teams and generic webhooks. MSP adds PagerDuty and can alert the cert owner directly, so your client hears about their own cert.
You can still see everything you've added. You just can't add new domains until you upgrade or remove some.
Only the domains you add and the public results of checking them (certificates, DNS, WHOIS). Sign-in is handled by Auth0 and payments by Stripe. We never see your card number.
Yes. Cancel in Settings → Billing. Your plan stays active until the end of the current billing period.
“Built by an infrastructure manager who got paged for one expired cert too many.”
— THE FOUNDER, 740FT
Free plan. No card. Add your first domain and see exactly what DomainCat finds.