CrowWake
A dark sky of watchers for DNS, email auth, security & speed.
Black silhouettes over your stack. When SPF, DKIM, DMARC, SSL, headers, or performance slip — we crow. First domain free. Live in minutes.
Free checkers — no login
Instant SPF, DKIM, DMARC, MX, CAA, MTA-STS, TLS-RPT, SSL, security header, and performance checks. Fail or warn? Get copy-paste DNS examples for that domain — then let CrowWake watch it for you.
Full check / domain monitoring
Domain monitoring pulse — SPF + DKIM + DMARC + MX + SSL + CAA vs live issuer (email auth flock)
SPF checker
Free SPF checker — include tree + 10 DNS-lookup limit, missing/+all warn
DKIM / monitoring
DKIM monitoring — common selectors, missing/empty public key warn
DMARC / monitoring
DMARC monitoring — _dmarc policy present, p=none warn, spoofing posture
MX / monitoring
MX monitoring — inbound exchangers present, priorities + hosts
DNS A / monitoring
DNS monitoring: does the hostname still have an IPv4 A record
Apex / monitoring
Apex monitoring — A/AAAA at the bare domain + CNAME-at-apex warning
CAA record / tester
CAA record checker / CAA tester — allow-list present + does it permit the live TLS issuer
MTA-STS / monitoring
MTA-STS monitoring — DNS id + HTTPS policy (mode, mx, max_age) still live
TLS-RPT / TLS reporting
TLS-RPT checker / TLS reporting — _smtp._tls v=TLSRPTv1 rua still published
BIMI / monitoring
BIMI monitoring — default._bimi inbox brand-mark DNS still published
SSL / expired / monitoring
SSL days left or expired + live issuer (pair with CAA)
Website / uptime / HTTP status
HTTP status / uptime pulse — HTTPS status + title
Expiry / WHOIS monitoring
Domain expiry monitoring — registration runway via public RDAP/WHOIS path
Security headers / monitoring
Security headers monitoring — nosniff, HSTS, X-Frame-Options, HTTPS redirect still live
Open port scanner
Risky TCP ports — FTP, Telnet, MySQL, Postgres, Redis, MongoDB
TTFB / performance monitoring
Website performance monitoring — TTFB-style HTTPS first-byte pulse still sane
What the flock watches
Email authentication (SPF / DKIM / DMARC / MX), DNS suite (CAA, MTA-STS, TLS-RPT, BIMI, expiry), website HTTPS, security gaps, and a lightweight performance pulse.
SPF
What is an SPF record? (plain English)
SPF monitoring
SPF monitoring: watch the guest list before mail breaks
DKIM
What is DKIM? Email’s tamper-evident seal
DKIM monitoring
DKIM monitoring: watch selectors before the seal breaks
DMARC
What is DMARC? The policy that stops spoofing
DMARC monitoring
DMARC monitoring: watch _dmarc before spoofers do
Email auth
What is email authentication? SPF, DKIM and DMARC together
Email auth monitoring
Email authentication monitoring: watch SPF, DKIM and DMARC as one flock
Domain monitoring
Domain monitoring: watch DNS, email auth, SSL and uptime as one flock
MX
What is an MX record? Where your email is delivered
MX monitoring
MX monitoring: watch inbound hosts before mail goes dark
DNS A
What is an A record? Name to IPv4
DNS monitoring
DNS monitoring: catch a silent A-record wipe early
Apex domain
What is an apex domain? Zone apex, bare domain, apex record
Apex monitoring
Apex domain monitoring: watch the zone apex before the bare name goes dark
CNAME at apex
CNAME at apex: why it breaks (ALIAS, ANAME, flattening)
SSL certificate expired
SSL certificate expired: what the browser warning means (and how to fix it)
SSL monitoring
SSL certificate monitoring: watch expiry before browsers scream
Security
Obvious web security: HSTS, clickjacking, HTTPS redirects, open ports
Security headers monitoring
Security headers monitoring: watch HSTS, nosniff, framing & HTTPS redirect
Open ports
What is an open port scanner? Risky ports in plain English
HSTS
What is HSTS? HTTP Strict-Transport-Security explained
X-Frame-Options
What is X-Frame-Options? Stop clickjacking in plain English
HTTPS redirect
HTTP to HTTPS redirect: force HTTPS in plain English
X-Content-Type-Options
Missing X-Content-Type-Options header: nosniff and how to fix
CAA record
What is a CAA record? Check CAA records (tester) in plain English
CAA monitoring
CAA monitoring: watch the issuance allow-list before renew fails
MTA-STS
What is MTA-STS? Mail TLS policy + free checker
MTA-STS monitoring
MTA-STS monitoring: watch mail TLS policy before cleartext returns
BIMI
What is BIMI? Brand logos in the inbox
BIMI monitoring
BIMI monitoring: watch inbox brand-mark DNS before the logo vanishes
TLS-RPT monitoring
TLS-RPT monitoring: watch TLS reporting before failures go silent
TLS-RPT / TLS reporting
What is TLS-RPT? TLS reporting + free TLS-RPT checker
Website monitoring
Website monitoring: is the HTTPS homepage answering?
Uptime monitoring
Uptime monitoring: watch HTTPS so downtime crows early
HTTP status monitoring
HTTP status monitoring: watch 2xx vs 4xx/5xx before “site down” is vague
Website
Website up: is there a real HTTPS homepage?
Expiry
Domain expiry via RDAP: renew before the brand dies
Expiry monitoring
Domain expiry monitoring: WHOIS/RDAP before the name dies
TTFB
What is TTFB? Time to First Byte in plain English
Performance monitoring
Website performance monitoring: watch TTFB before tickets pile up
Performance
Why we pulse HTTPS speed (TTFB-style)
Plan pools — try one, then grow
Full flock on every tier. Free is enough to trust the product; Solo is for single-site peace of mind; Pro and Agency unlock capacity. Upgrade from the dashboard after login.
Free
1 domain · full watchers · ntfy · OTP login
$5 / €5/mo
Solo · 3 domains · email alerts · or $48 / €48/yr
$12 / €12/mo
Pro · 15 domains · or $120 / €120/yr
$29 / €29/mo
Agency · 50 domains · or $290 / €290/yr
Need a middle step? +10 domains for $6 / €6/mo. Checkout uses USD or EUR by region — not a live FX conversion of the other amount.
Minutes, not onboarding
Email a code → add a domain → pick what to watch. No passwords. Almost no personal data. Built for agencies that want quiet confidence.