Freedom251 › DNS Monitoring Software
ZoneWatcher
What ZoneWatcher is
ZoneWatcher monitors DNS records and alerts when they change, typically checking each zone every five minutes. It also watches Certificate Transparency logs for new certificate issuances and tracks certificate expiration. Protect and Control plans add AI DNS risk assessment, similar-domain detection, enhanced zone health checks, DNSSEC validation monitoring, and PDF compliance reports. Control additionally provides beta DNS change management, rollback, propagation monitoring, and configurable check intervals. Notifications can reach email, Slack, Microsoft Teams, Discord, webhooks, GitHub Issues, Jira, and HaloPSA. ZoneWatcher connects to DNS provider APIs and offers a Public DNS provider for domains without a supported API. Monitoring uses read-only access; write access is needed for Control changes and rollback. Plans are billed per domain with a five-domain minimum: Monitor costs $1.40 a month, Protect 2.50 USD, and Control 4.00 USD. A 7-day trial is available.
Who it suits
ZoneWatcher suits teams responsible for DNS, certificates, and domain security across web or API workflows. Organizations monitoring more than 5,000 domains must request a custom plan.
What it does well
- Checks DNS zones typically every five minutes
- Monitors certificate issuance and expiration
- Offers many notification channels
- Includes DNSSEC and similar-domain monitoring on higher plans
- Provides read-only monitoring access
What to know first
- No free plan is available
- All plans require at least five domains
- Control change management requires write access
- More than 5,000 domains require a custom plan
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Monitor | per domain · 5 domain minimum · 10 team members · 1-year data retention · API access 60 req/min | $14 a year |
| Protect | per domain · 5 domain minimum · unlimited team members · 5-year data retention · API access 150 req/min | $25 a year |
| Control | per domain · 5 domain minimum · unlimited team members · 7-year data retention · API access 500 req/min · priority support | $40 a year |
As zonewatcher.com lists them, read 1 Oct 2026. The maker's own page has the final word.
Verdict
ZoneWatcher combines DNS change alerts, certificate monitoring, security checks, and optional change control. Its per-domain plans scale from basic monitoring to longer retention and Control features, with a five-domain minimum.
Facts from ZoneWatcher's own pages
- Audit reporting
- Protect and Control plans include PDF compliance reports, with change history retention of five years and seven years respectively. · api.zonewatcher.com, 1 Oct 2026
- Certificate monitoring
- The service monitors Certificate Transparency logs for new certificate issuances and tracks certificate expiration. · api.zonewatcher.com, 1 Oct 2026
- Change governance
- The Control plan provides beta DNS change management, rollback, propagation monitoring, and configurable check intervals. · api.zonewatcher.com, 1 Oct 2026
- Compliance status
- ZoneWatcher is not currently SOC 2 certified but says its controls operate according to the SOC 2 Trust Services Criteria. · zonewatcher.com, 1 Oct 2026
- DNS monitoring
- ZoneWatcher continuously monitors DNS records and alerts on changes, typically checking each zone every five minutes. · zonewatcher.com, 1 Oct 2026
- Founded
- 2016 · zonewatcher.com, 28 Sept 2026
- Notifications
- Supported notification channels include email, Slack, Microsoft Teams, Discord, webhooks, GitHub Issues, Jira, and HaloPSA. · api.zonewatcher.com, 1 Oct 2026
- Provider integrations
- ZoneWatcher integrates with DNS provider APIs and offers a Public DNS provider for domains whose providers lack a supported API. · api.zonewatcher.com, 1 Oct 2026
- Read-only operation
- Monitoring plans use read-only access, while write access is required only for Control-plan change management and rollback. · api.zonewatcher.com, 1 Oct 2026
- Scale limit
- Customers monitoring more than 5,000 domains are directed to contact ZoneWatcher for a custom plan. · api.zonewatcher.com, 1 Oct 2026
- Security controls
- Provider credentials receive application-level AES-256 encryption, customer traffic uses TLS, and two-factor authentication with TOTP is available to every user. · zonewatcher.com, 1 Oct 2026
- Security intelligence
- Protect and Control plans include AI DNS Risk Assessment, similar-domain detection, enhanced zone health checks, and DNSSEC validation monitoring. · api.zonewatcher.com, 1 Oct 2026
- Support
- ZoneWatcher provides support at [email protected], and the Control plan includes priority support. · api.zonewatcher.com, 1 Oct 2026
Where ZoneWatcher stands on Freedom251
- DNS Monitoring Software#38 of 39