We read your domain’s SPF record on every scan. If SPF is duplicated or missing, “No duplicate SPF record” or “SPF present” fails and we alert you.
Security change monitoring for IT and DevOps teams.
Other checks: TLS PQC Security Headers security.txt MCP Agent Card x402 all checks
Example email
Selected assertion “No duplicate SPF record” fails.
Open the monitor for details.
View monitor14 days of the Team plan. No credit card required.
Your hosting provider, CDN and DNS host change settings on their own schedule. Most of their changes leave your site up, so your uptime monitor says nothing and you hear about them from a customer or at the next pentest. Each line names the assertion that catches its change.
The alert tells you what changed and which selected assertion failed. Open the affected monitor from the email to review the exact diff.
Example email
Selected assertion “HSTS enabled” fails.
Open the monitor for details.
View monitorSee which default assertions your endpoint fails today.
No sign-up needed
A hosted app was shut down, but the docs CNAME still points to the app’s hostname. Whoever claims that hostname next can serve pages on your docs subdomain. A DNS monitor for that CNAME alerts when its target stops resolving, with “No dangling alias” ticked by default. Every change is dated with before and after values.
docs.
example-docs.resolves does not resolve
Run the same DNS check on your own domain.
No sign-up needed
Every change is kept with its date and its before and after values, including changes that sent no alert. When a security questionnaire asks, find it under “All changes”. Your plan sets how far back you can look.
example.
removed 192. added 198.
api.
30 days or less 14 days or less
example.
X25519MLKEM768
shop.
1 year 0 seconds
example.
mailto:
mcp.
fetch_
example.
Summarises one public web page. Summarises any page, including ones behind a login.
api.
50000 100000
No. You can check your site's certificates, DNS records and security headers and see how they change between scans. We don't try to exploit your site or API.
No. Keep your uptime monitor running alongside Netonica for outage alerts.
No. We check from outside, the way anyone on the internet can. We need no access to your servers and nothing installed on them.
You have to remember to run each free check. A monitor repeats your check and records changes. Default scan schedule: hourly. Scans can run hourly on Pro, every 30 minutes on Team and every 15 minutes on Business.
Monitors alert when selected assertions fail or recover. A new monitor selects a few by default. The first scan alerts on failing selected assertions. Assertions that compare saved values, like your certificate's issuer, start once you pin the current value. Every other change goes under “All changes” without an alert, unless you turn on “Alert on every change”.
The first scan alerts on failing selected assertions. For example, a required security header may be missing. You get 14 days of the Team plan. No credit card required.
If you have not chosen a paid plan, your monitors are paused when the trial ends. Choose a paid plan to resume them. See plans.
You can receive alerts by email, in Slack or through webhooks on every paid plan. Set up the channels in your workspace, then choose which ones each monitor uses.
We make TLS connections, DNS lookups or HTTP requests to the address you choose. We don't try to exploit your site, sign in, guess passwords or crawl your pages. What our scanner reads and how to request a stop.
See which assertions your site or API passes today.
No sign-up needed
