Features · Discovery & Mapping · Domain Discovery
Discovery & Mapping · Domain Discovery

Every domain you serve,
found and watched.

The agent reads nginx, apache, caddy and traefik config on every host and surfaces the hostnames you serve. Each one gets uptime + SSL monitoring without you adding it anywhere.

discovered · web-prod-04
api.example.com200 · 142ms
app.example.com200 · 88ms
admin.example.comredirect · 301
static.example.com200 · 41ms
blog.example.comcert · 12d
— Why this matters

Your domains are already described — in your web-server config.

01

The vhost is the source of truth.

Server names, document roots and log paths are already written down on the host. Reading them beats asking someone to maintain a second list.

02

A domain you forgot is the one that expires.

The certificate nobody is watching belongs to the property nobody remembered. Discovery finds it before the outage does.

03

Not everything lives on your servers.

Properties hosted elsewhere still need watching, so manual entries sit beside discovered ones and behave identically.

— What's included

What comes back with each domain.

Server names and roots
Read from Nginx, Apache and Caddy vhosts, tied to the host they were found on.
Certificate expiry
Tracked per domain, with renewal through Certbot where you use it.
DNS deep checks
SOA, NS, MX, SPF, DKIM, DMARC, CAA and DNSSEC — the records that are wrong quietly.
Propagation across eight resolvers
Google, Cloudflare, Quad9, OpenDNS, Level3, Comodo, AdGuard and Yandex, with a percentage and per-resolver response times.
Change detection
Snapshots every 15 minutes, graded by severity. An NS change is critical — that is what a domain takeover looks like. An A record change is a warning.
CDN detection
Cloudflare, Fastly, Akamai and friends, identified rather than guessed.
DNS records via provider
Cloudflare, INWX and Namecheap managed through their APIs, with a badge marking which domains are connected.
Manual entries
Name, optional server, notes, monitoring toggle. Marked as manual so the list stays honest.
Pause without deleting
One toggle stops the uptime check and the alerts, without losing the record.
— Works with

Connected capabilities

— FAQ

Questions, answered honestly.

What if my web server is something unusual? +
We parse nginx, apache2, caddy and traefik out of the box. For others, point the agent at a folder of vhost files or add the domains manually.
Does it dial out to the domain from the host or from your platform? +
Discovery happens locally on the host (just reads files). The HTTP / SSL checks fire from our regional checkers — the external view, not the internal one.
How do you handle wildcard certificates? +
The SAN list is parsed exactly as Mozilla / Chrome does it. A *.example.com cert is matched to every foo.example.com we discover so we don't alert twice.
Can I tell it to ignore a domain? +
Yes — per-domain mute, or globally exclude by glob in /etc/hostatlas/exclude.yml.

Find every domain. Watch every cert.

Included on every plan — uptime checks scale with your tier.

Get early access Back to Discovery & Mapping