Flagship product
ZoneWatcher
Since 2016
Monitor, protect, and control every DNS change.
ZoneWatcher checks your zones every few minutes, stores the exact before-and-after of every record change, and alerts your team in Slack, email, Teams, Discord, Jira, HaloPSA, and more. Independent of whoever — or whatever — made the change.
− MX 10 mail.acme-corp.com
+ MX 10 mx1.obscure-relay.ru
A teammate, a script, or an agent edits a record. ZoneWatcher captures the diff, scores the risk, and pages the people who need to know.
Monitor
DNS records, certificates, nameservers, and domain registrations — checked around the clock, with a full history you can export.
Protect
AI risk scoring on every change, lookalike-domain detection, DNSSEC validation, and zone health checks before they become incidents.
Control
Stage changesets, route them through approval, watch propagation, and roll back without leaving ZoneWatcher.
Open source
Laravel Enums
Artisan generators and collection helpers for PHP 8.1+ enums in Laravel.
GitHub →
Actions Pattern
A minimal Laravel package for single-purpose action classes, with an artisan generator.
GitHub →
Railway Image Updater
A Go HTTP service that rolls a new Docker image tag across every matching Railway service — web, worker, cron — in one API call.
GitHub →
Writing
From the ZoneWatcher blog
August 10, 2026
Your AI Agent Just Changed Your DNS Records. Did Anyone Notice?
Autonomous coding agents now hold DNS credentials. When they “clean up” a record, independent monitoring is how anyone notices.
Read on ZoneWatcher →
August 9, 2026
HaloPSA Notifications: DNS Alerts That Land as Tickets
If your service desk lives in HaloPSA, your DNS alerts should too.
Read on ZoneWatcher →
August 9, 2026
Your Clients’ Certificates Now Expire Twice a Year, and 100 Days Is Coming
In March 2026, the maximum lifetime of a public TLS certificate dropped from 398 days to 200.
Read on ZoneWatcher →
Older notes live in the writing archive.