SubdomainWatch
Continuous attack surface monitoring and IaC guard preventing subdomain takeovers, dangling DNS records, and email hygiene flaws.
Visit subdomainwatch.com →DocsPricing
SubdomainWatch is an external, agentless DNS and attack surface monitoring service. It performs continuous recursive DNS resolution against a library of 20 cloud provider signatures (AWS S3, GitHub Pages, Heroku, Azure, Cloudflare, Vercel, etc.) to detect dangling CNAME records vulnerable to subdomain takeover. It also checks SPF records for RFC 7208 10-lookup limit violations, validates DMARC, MTA-STS, and DNSSEC configurations, monitors SSL/TLS certificate expiry at 30/14/7-day thresholds, and probes for exposed staging assets. Findings are delivered via email (Resend), Slack webhooks, and an API callable from CI/CD pipelines. Pricing tiers: Free (1 domain, weekly scans), Starter £49/month (3 domains, daily scans), Pro £129/month (15 domains, hourly scans).
- Category
- Security
- Pricing
- freemium · from £0
- Free tier
- yes
- API
- yes
- MCP server
- no
- SDK
- no
- Open source
- no
Alternatives to SubdomainWatch →
Listed 2026-10-21 · last verified 2026-10-21 · extracted by @cf/zai-org/glm-5.3-flash · confidence 0.95
Your product? Claim this listing · Report a problem · Badge
API
curl https://toolgrep.com/api/products/subdomainwatch