Don't lose another client
to an expired SSL.
It only takes one. One red lock screen. One angry call. One quietly cancelled retainer.
DomainsPulse watches every client site you manage — SSL, domain registration, DNS records, uptime — and sends one calm, deduplicated alert before anything breaks. No spreadsheets.
Don't take our word. Run a check.
This widget runs the same TLS handshake, WHOIS lookup, DNS resolution, and HTTPS probe we run every six hours on your portfolio. Live, on the server, right now. Try it on a domain that already worries you.
One expired cert. Five bad days.
Agency owners don't lose clients because of bad code. They lose them in five-step chains like this — small, silent, and easy to interrupt at the very first step.
- T+001
The cert silently expires.
No human notices. There's no error in your inbox. Your client's site is still up — just broken in a way browsers care about.
where DomainsPulse fires - T+10m02
Visitors see the red lock screen.
“Your connection is not private.” Most leave instantly. Conversion-tracked sites watch revenue fall off a cliff in real time.
- T+1h03
Your client's customers complain.
“Something's broken on your website.” Your client doesn't know what SSL is. They know it's broken. They know who built it.
- T+2h04
Your phone rings.
It's the client. Calm but cold. They want to know how this happened. You don't have a clean answer.
- T+1w05
They're quietly shopping.
The retainer renewal conversation gets shorter. The next agency they evaluate doesn't have to be better — just present at the right moment.
We send the alert at 14d, 7d, 1d, and on expiry. By the time anyone notices, you've already renewed.
Four signals. Quietly watched.
Most monitoring tools watch one of these. We watch all four — because the silent failures (a registrar lapsing, a chain becoming invalid, a nameserver swap) are exactly the ones that wreck client relationships before anyone notices.
- 01TLS handshake
We read the cert every six hours.
A real port-443 connection — same as a browser load. We surface issuer, validity window, days remaining, and any chain or hostname mismatch.
- › RFC 5280 X.509
- › ALPN: http/1.1
- › 12s timeout
- › no rejectUnauthorized
- 02WHOIS
Registry expiry, parsed across 1,400 TLDs.
Multi-field fallback resolution (registryExpiryDate, registrarRegistrationExpirationDate, expirationDate, paidTill…). The fields registrars love to disagree on, normalized.
- › registry + registrar follow
- › fallback fields
- › rate-aware
- › subdomain root resolution
- 03DNS
Drift detection across A, MX, NS.
We snapshot record sets and diff each run. An A record swap is suspicious; an NS change is critical and gets escalated severity.
- › A · MX · NS
- › set-equality diff
- › system resolver
- › NS change → critical
- 04HTTPS probe
End-to-end load with timing.
Real GET request. Status, response time, redirect chain. 5xx escalates to a critical alert; 4xx warns; cert mismatch surfaces with a clear reason.
- › GET / · follow redirects
- › 12s budget
- › <500 = healthy
- › labelled UA
Why agencies move from UptimeRobot + a spreadsheet.
Most monitoring tools watch one signal. Most agency portfolios fail on a different signal. The honest table:
One email. Zero panic.
Every alert tells your future self three things in one glance: what broke, when it'll bite, and which client to call first. No graphs to interpret. No 14-tab dashboards.
- ›Severity-tagged. critical · warning · info
- ›Deduped automatically. the same SSL never alerts twice
- ›Routed where you live. email, Slack, webhook, n8n
- ›Linked to the dashboard. one click to context, history, and re-check
- domain
- harborclinic.io
- client
- Harbor Clinic, LLC
- issuer
- Let's Encrypt
- expires
- 2026-05-03 04:18 UTC
- last alert
- 7 days ago (warning)
One avoided crisis pays for the year.
Charge a single client $99/mo for "managed infrastructure monitoring" and the most expensive plan still has margin. 14-day trial, no card.
For freelance devs and solo studios.
- ›10 domains
- ›All four checks · every 6h
- ›Email alerts
- ›Bulk import + manual re-checks
For agencies with a real client roster.
- ›50 domains
- ›Checks every 30 minutes (Pro+)
- ›Email · Slack · webhook · n8n
- ›Per-client grouping & tags
- ›Priority support
Scale to 200 client sites without flinching.
- ›200 domains
- ›30-minute cadence + on-demand
- ›All channels + escalation
- ›White-label-ready (beta)
- ›Onboarding call
all plans include · ssl · whois · dns · uptime · alert dedupe · audit log · csv export
We're new. That's why the demo is on the homepage.
I won't pretend to have a wall of customer logos. I built DomainsPulse because my own shortlist of monitoring tools made me babysit a spreadsheet of client domains, and the one time I missed a renewal I lost a client. So instead of asking you to trust a testimonial, I put the engine itself on the homepage: paste any domain you manage and watch it run a TLS handshake, a WHOIS lookup, a DNS resolution, and a real HTTPS probe in front of you. That's the pitch.
If something's missing for your workflow, the founder reads every email at hi@domainspulse.app. If you're an agency with 50+ client sites and want a hand-importing them, send the list — I'll do it for you and screen-share what we caught.
The questions agency owners actually ask.
If something here doesn't answer you, the founder reads every reply at hi@domainspulse.app.
Those tools watch one thing: is the site up. They don't tell you that your SSL cert expires in 9 days or that your client's domain registration lapses next Tuesday. We watch four signals at once — uptime, SSL, WHOIS, and DNS — because the silent ones are what cost you clients.
Yes for SSL, DNS, and HTTP. WHOIS data only exists for root domains, so for `app.client.com` we fall back to checking `client.com`'s registration. Add the root domain once and you cover everything underneath it.
Every 6 hours by default. On Pro and Agency plans you can dial it down to every 30 minutes. Manual re-checks are unlimited and instant.
Alerts are deduplicated by event — if a cert is expiring in 14 days, you get one alert today, then another at 7 days, then 1 day. You don't get hourly noise. Each alert can route to email, Slack, or a webhook. We integrate cleanly with n8n if you want richer routing logic.
Yes. WHOIS, DNS, and SSL information is public registry / DNS / TLS handshake data — the same stuff a browser reads when it loads your site. We don't authenticate against anything you own.
Today we do client grouping and organization tagging. Full white-label PDF reports and per-client portals are on the Agency plan roadmap; talk to us if you need them yesterday.
Yes — paste a CSV or newline-separated list. We fingerprint each one in parallel; a portfolio of 100 domains is fully checked in under two minutes.
14 days, up to 5 domains, all four checks, email alerts. No card. We charge after you've already seen the alerts work for you.
Watch the silent things.
Sleep well.
Add your first 5 domains in under 90 seconds. We'll fingerprint each one before you finish your coffee.