CrowWake
A dark sky of watchers for DNS, email auth, security & speed.
Black silhouettes over your stack. When SPF, DKIM, DMARC, SSL, headers, or performance slip — we crow. First domain free. Live in minutes.
Free checkers — no login
Instant SPF, DKIM, DMARC, MX, CAA, MTA-STS, TLS-RPT, SSL, security header, and performance checks. Fail or warn? Get copy-paste DNS examples for that domain — then let CrowWake watch it for you.
Full check / domain monitoring
Domain monitoring pulse — SPF + DKIM + DMARC + MX + SSL + CAA vs live issuer (email auth flock)
SPF / SPF checker
SPF checker — v=spf1 include tree + 10 DNS-lookup limit, missing/+all warn
DKIM / DKIM checker
DKIM checker — common selectors, missing/empty public key warn
DMARC / DMARC checker
DMARC checker — _dmarc v=DMARC1 policy present, p=none warn, spoofing posture
MX / MX checker
MX checker — inbound exchangers present, priorities + hosts
DNS A / DNS A checker
DNS A checker — does the hostname still have an IPv4 A record
Apex / monitoring
Apex monitoring — A/AAAA at the bare domain + CNAME-at-apex warning
CAA record / tester
CAA record checker / CAA tester — allow-list present + does it permit the live TLS issuer
MTA-STS / MTA STS checker
MTA-STS checker / MTA STS checker — DNS id + HTTPS policy (mode, mx, max_age) still live
TLS-RPT / TLS reporting
TLS-RPT checker / TLS reporting — _smtp._tls v=TLSRPTv1 rua still published
BIMI / BIMI checker
BIMI checker — default._bimi v=BIMI1 inbox brand-mark DNS still published
SSL / expired / monitoring
SSL days left or expired + live issuer (pair with CAA)
HTTP status monitoring / website HTTPS
HTTP status monitoring checker — HTTPS status code + title
Expiry / WHOIS monitoring
Domain expiry monitoring — registration runway via public RDAP/WHOIS path
HTTPS redirect / HSTS / X-Frame-Options / X-Content-Type-Options / security headers
HTTPS redirect / HSTS / X-Frame-Options / X-Content-Type-Options / security headers checker — force HTTPS, Strict-Transport-Security, clickjacking, nosniff still live
Open port scanner / open ports checker
Open port scanner — risky FTP, Telnet, MySQL, Postgres, Redis, MongoDB still answering on the public hostname
TTFB / TTFB checker / performance
TTFB checker — Time to First Byte / website performance monitoring pulse still sane
What the flock watches
Email authentication (SPF / DKIM / DMARC / MX), DNS suite (CAA, MTA-STS, TLS-RPT, BIMI, expiry), website HTTPS, security gaps, and a lightweight performance pulse.
SPF
What is SPF? Guest list + free SPF checker
SPF monitoring
SPF monitoring: watch the guest list before mail breaks
DKIM
What is DKIM? Wax seal + free DKIM checker
DKIM monitoring
DKIM monitoring: watch selectors before the seal breaks
DMARC
What is DMARC? Spoofing policy + free DMARC checker
DMARC monitoring
DMARC monitoring: watch _dmarc before spoofers do
Email auth
What is email authentication? SPF, DKIM and DMARC together
Email auth monitoring
Email authentication monitoring: watch SPF, DKIM and DMARC as one flock
Domain monitoring
Domain monitoring: watch DNS, email auth, SSL and uptime as one flock
MX
What is an MX record? Postal route + free MX checker
MX monitoring
MX monitoring: watch inbound hosts before mail goes dark
DNS A
What is a DNS A record? Name → IPv4 + free DNS A checker
DNS monitoring
DNS monitoring: catch a silent A-record wipe early
Apex domain
What is an apex domain? Zone apex, bare domain, apex record
Apex monitoring
Apex domain monitoring: watch the zone apex before the bare name goes dark
CNAME at apex
CNAME at apex: why it breaks (ALIAS, ANAME, flattening)
SSL certificate expired
SSL certificate expired: what the browser warning means (and how to fix it)
SSL monitoring
SSL certificate monitoring: watch expiry before browsers scream
Security
Obvious web security: HSTS, clickjacking, HTTPS redirects, open ports
Security headers monitoring
Security headers monitoring: watch HSTS, nosniff, framing & HTTPS redirect
Open ports
What is an open port scanner? Risky FTP/DB ports + free open port scanner
HSTS
What is HSTS? Strict-Transport-Security + free HSTS checker
X-Frame-Options
What is X-Frame-Options? Clickjacking header + free X-Frame-Options checker
HTTPS redirect
What is an HTTP to HTTPS redirect? Force HTTPS + free HTTPS redirect checker
X-Content-Type-Options
What is X-Content-Type-Options? nosniff + free X-Content-Type-Options checker
CAA record
What is a CAA record? Check CAA records (tester) in plain English
CAA monitoring
CAA monitoring: watch the issuance allow-list before renew fails
MTA-STS
What is MTA-STS? Mail TLS policy + free MTA-STS checker
MTA-STS monitoring
MTA-STS monitoring: watch mail TLS policy before cleartext returns
BIMI
What is BIMI? Inbox brand mark + free BIMI checker
BIMI monitoring
BIMI monitoring: watch inbox brand-mark DNS before the logo vanishes
TLS-RPT monitoring
TLS-RPT monitoring: watch TLS reporting before failures go silent
TLS-RPT / TLS reporting
What is TLS-RPT? TLS reporting + free TLS-RPT checker
Website monitoring
What is website monitoring? Free website monitoring checker
Uptime monitoring
What is uptime monitoring? Free uptime monitoring checker
HTTP status monitoring
What is HTTP status monitoring? Free HTTP status monitoring checker
Website
Website up: is there a real HTTPS homepage?
Expiry
Domain expiry via RDAP: renew before the brand dies
Expiry monitoring
Domain expiry monitoring: WHOIS/RDAP before the name dies
TTFB
What is TTFB? Time to First Byte + free TTFB checker
Performance monitoring
Website performance monitoring: watch TTFB before tickets pile up
Performance
Why we pulse HTTPS speed (TTFB-style)
Plan pools — try one, then grow
Full flock on every tier. Free is enough to trust the product; Solo is for single-site peace of mind; Pro and Agency unlock capacity. Upgrade from the dashboard after login.
Free
1 domain · full watchers · ntfy · OTP login
$5 / €5/mo
Solo · 3 domains · email alerts · or $48 / €48/yr
$12 / €12/mo
Pro · 15 domains · or $120 / €120/yr
$29 / €29/mo
Agency · 50 domains · or $290 / €290/yr
Need a middle step? +10 domains for $6 / €6/mo. Checkout uses USD or EUR by region — not a live FX conversion of the other amount.
Minutes, not onboarding
Email a code → add a domain → pick what to watch. No passwords. Almost no personal data. Built for agencies that want quiet confidence.