DriftWatch

What DriftWatch is

DriftWatch monitors domain DNS records and alerts teams to changes with before-and-after differences. It discovers A, AAAA, MX, CNAME, TXT, NS, SOA, SRV, and CAA records, and detects changes by comparing SHA-256 checksums against stored snapshots. Users can select specific records or monitor an entire domain, with scan intervals configurable for each domain.

Alerts are available through email, Slack, webhooks, and Pushover; Slack and Pushover require Pro or higher. Webhook notifications support HMAC-SHA256 signatures, configurable headers, and exponential backoff retries. Teams can use owner, admin, member, and viewer roles, shared change history, and alert acknowledgements. The REST API supports domain management, change queries, alert configuration, and scan triggers. Free includes three domains, 50 DNS records, hourly scans, one email alert channel, and seven days of history. Pro costs $29 a month; Enterprise costs $99 a month. Subdomains count as separate domains, and limits block additions until items are removed or the plan is upgraded.

Who it suits

DriftWatch identifies MSPs, hosting providers, DevOps and platform teams, and security teams as intended users. It suits teams that need to track DNS changes and route alerts through supported channels.

Limits

The Free plan allows three domains, 50 DNS records, hourly scans, one email alert channel, and seven days of change history. Pro includes 25 domains, five-minute scans, ten alert channels, 90-day history, and 1,000 API requests per day; Enterprise includes 100 domains, one-minute scans, unlimited channels, one-year history, and 50,000 daily API requests.

Getting started

1. Open driftwatch.app
2. Create an account on the web service
3. Choose the Free, Pro, or Enterprise plan
4. Add domains and select records or whole-domain monitoring
5. Configure scan intervals and alert channels
6. Connect API clients with Sanctum token authentication

Verdict

DriftWatch combines DNS change tracking with configurable scans, team access, alerts, and an API. Check domain and channel limits before choosing a plan, since reaching a limit blocks additions until items are removed or the plan is upgraded.