The timeline of changes
Every change seen on your proved domains, dated: subdomains, ports, DNS, mail, certificates, look-alikes. Filter it, export it, know which ones alert.
The Changes page is a dated timeline of everything that changed on your proved domains, audit after audit. It is where you notice a subdomain nobody told you about, a port opened by mistake or a mail server that changed.
What it lists
| Family | Changes |
|---|---|
| Subdomains | New subdomain, subdomain gone |
| Ports | Port opened, port closed |
| DNS | Name servers changed, DNSSEC changed |
| Mail servers changed, SPF changed, DMARC changed (with the value before and after) | |
| Certificates | Certificate issued (from the public logs, unusual ones flagged), certificate renewed |
| Look-alikes and cloud | Look-alike domain registered, cloud storage found |
Each line gives when it happened, the kind of change, the domain, what changed and the detail, with a link to the audit that saw it. Certificates come from the Certificate Transparency logs, read between audits, so they can appear before the next audit.
The timeline fills from the second audit of each proved domain: the first audit is the starting point.
Filter and export
- Family: all, or one of the families above.
- Period: the last 30, 90 (by default) or 365 days.
- Domain: all domains or one of them.
- To look at: keeps only what deserves a look: new subdomains, opened ports, DNS and mail changes, look-alikes and unusual certificates.
Export (CSV) downloads the changes shown, with the same filters. On a busy portfolio, only the latest changes are shown: narrow the period or pick a domain to see the rest.
The dashboard’s This week card shows the changes of the last seven days.
Which changes send an alert
A channel set to changes on the Alerts page is told after an audit that finds a new subdomain, an opened port, a DNSSEC change, a look-alike, a new certificate or cloud storage. Unusual certificates are told as soon as they are read from the logs, without waiting for an audit. The other changes (name or mail servers, SPF, DMARC, renewals) are listed here and in the audit report.