A score every Monday
Each domain's Email Security Score with its DMARC, SPF, DKIM, BIMI, MTA-STS and MX checks, what changed since last week, and the one issue to look at first.
Domain Watch
Weekly DMARC record monitoring by email: your domain's DMARC, SPF and DKIM score every Monday, plus an alert when that check finds a change that can break your mail.
What you get
Know the week your email security slips
DNS records change without anyone noticing: a host move drops a record, a new tool adds an SPF include, someone loosens a policy to stop a bounce. Domain Watch checks every week and tells you.
An alert when a record breaks
When the weekly check finds a breaking change, a separate email names it, shows the record before and after, and says what to check first.
One roll-up for MSPs
Paste up to 25 client domains and get one email for the whole list, worst domain first: who to call this week.
Alerts
Five changes worth an email
Each one is visible in public DNS, so Domain Watch can see it without access to anything of yours.
A record disappears
Your DMARC, SPF, BIMI or MTA-STS record is no longer published.
DMARC policy gets weaker
p=reject drops to quarantine or none, or pct falls.
SPF goes over 10 lookups
A new include pushes SPF past the limit, so receivers return a permanent error.
A DKIM key goes missing
A selector that answered last week no longer returns a public key.
A new sender shows up in SPF
Someone added an include or IP range that was not there last week.
Sample email
What lands in your inbox
Worst domain first, what changed since last week, and the one issue to look at on each domain. Every domain links to its full check. MSPs get the same thing as one table for the whole client list.
Want the full check now? Run the Email Security Score or, for a whole client list at once, the Portfolio Benchmark Audit.
Sample weekly report built from made-up domains on the reserved .example TLD. Not real scan results.
From Palisade Domain Watch
Domain Watch: 2 of 3 domains need attention
harbor-legal.example went from 58 to 22. The DMARC record was removed
Questions
Domain Watch questions
What does Domain Watch check?
The same public records as the Email Security Score: DMARC, SPF, DKIM, BIMI, MTA-STS and MX, scored by the same audit. It reads public DNS only. It never touches your mailboxes, your messages or your DNS account.
How often does Domain Watch check, and when do alerts arrive?
Once a week, on Monday. The report goes out after that check, and if the check finds a breaking change since the week before, a separate alert email goes out the same day. A change made on a Tuesday is found the following Monday.
Does Domain Watch fix anything?
No. It reports, and that is all. Fixing is what Palisade does: the agent investigates every sender, drafts every fix, and proposes each policy step, you approve before anything ships.
Do I need an account?
No. Domain Watch needs only an email address. We send a confirmation link first, and nothing else is sent until you click it. There is no login: the report and alerts arrive by email, and every email has a one-click unsubscribe.
How many domains can I watch?
Up to 3 of your own domains per email address. MSPs can paste a client list of up to 25 domains and get one roll-up email for it, worst domain first, plus an alert for any client domain that breaks.
Can Domain Watch tell me who is sending email as my domain?
No. DNS shows which senders you have authorized, not who is actually sending. That needs DMARC aggregate reports. Palisade reads those reports, classifies every sender, and drafts the SPF and DKIM fixes each one needs.
Is Domain Watch free?
Yes. Domain Watch is a free tool, not a Palisade plan. Palisade, which fixes what Domain Watch finds, is a paid product that starts with a 15-day full-product trial. Nothing is charged until it ends. Plans and prices are on the pricing page.