Pricing

One number decides the price.

A plan is sold on how many domains you keep under watch. Registered watches one domain, at $0.

Registered
$0

Verify anything. Watch one domain.

  • 1 domain under watch
  • 7 days of signed history
  • 1 group, 1 approved baseline
  • 20 API requests a day
  • A weekly email report
  • No signed evidence bundles
Create an account →
Solo
$29/mo

Sold on one number: the domains you keep under watch. Signed proof is bought per export, on the day someone asks.

  • 5 domains under watch
  • 30 days of signed history
  • 3 groups, 5 approved baselines
  • A daily email report
  • 1 signed evidence bundle a month
  • 200 API requests a day
Get Solo →
Scale
$299/mo

Sold on one number: the domains you keep under watch. Signed proof is bought per export, on the day someone asks.

  • 2,000 domains under watch
  • 365 days of signed history
  • 50 groups, 50 approved baselines
  • A daily email report
  • 15 signed evidence bundles a month
  • 2,000 API requests a day
Get Scale →

Credits top up anything: past your daily DomainDrift credits, a heavy day draws your bought DRM3 credits, not a bigger tier.

Talk to us
Let's talk

Bigger estates, your brand on it, and terms we write with you.

  • Domains, groups and baselines named in the contract
  • Your brand on the dashboard and on the reports
  • A scan cadence we commit to in writing
  • SSO, an SLA, and the procurement paperwork
Talk to us →
Compare every limit
Registered$0
Solo$29/mo
Scale$299/mo
Talk to us

Watch

The rung is sold on this: how many domains you keep under continuous watch.

Domains under watch
1
5
2,000
Sized to your estate
Fast-lane picksYour picks ride ahead of the sweep
None
5
200
Custom
Scan cadence
As often as every 5 minutes
As often as every 5 minutes
As often as every 5 minutes
Committed in writing

Operate

Group the estate, sign off baselines, alert on drift, pull the API.

Domain groupsWatched domains you alert on as one set
1
3
50
Custom
Approved baselinesThe known-good record you sign off
1
5
50
Custom
Change alertsWebhook or email subscriptions
1
25
1,000
Custom
Emailed reportWhat changed on your watched domains, and what expires soon
Weekly
Daily
Daily
Daily
API requestsVia your daily DomainDrift credits
20 a day
200 a day
2,000 a day
Custom
SupportOpen a ticket tied to your account
By email
Included
Included
Priority

Prove

Show what a domain was, and when, with evidence anyone can verify.

Signed history
7 days
30 days
365 days
Custom
Evidence bundlesA signed export, verifiable offline
None
1 a month
15 a month
Custom

Verify is public for everyone, always: any receipt, any page, and the on-chain anchor, at /verify. No account.

Past the allowance above, one more short-window export is 100 credits ($1.00). The whole signed archive in one export is 2,500 credits ($25.00), and is never included in a rung.

A domain under watchA watched domain moves onto the watch lane: its nameservers, mail, certificate, DNSSEC, and reachability are re-checked as often as every 5 minutes, and every check lands in the signed history. is re-checked as often as every 5 minutes, and you are alerted within minutes of the reading that catches a material change.

No account? Try it now - one command returns a real, current preview of the signed record. No key.

curl https://domaindrift.io/v1/domains/netflix.com

Every paid plan includes

  • The complete signed record for any domain, not the preview
  • Every list in full - services, certificates, changes, reachability
  • Point-in-time history and the time machine on any domain
  • Alerts in Slack, Teams, Discord, a webhook, or your inbox, signed on delivery
  • CSV export of any list you can see
  • The full REST API, the live stream, and the MCP server

Anonymous reads are live, signed and rate limited. Registering opens the whole wire plus your own read key.

Talk to us
Let's talk

For an estate that does not fit a card.

  • Your brand on the dashboard and the reportsThe screens your clients see and the evidence you send them, under your name - scoped in the contract
  • Custom workflowsThe checks, the thresholds and where each alert lands, matched to how your team already works
  • Reseller and MSP portfolios1,000+ domains across your clients, sized to a cadence we commit to rather than sold from a card
  • Your whole estate onboardedBulk bring-your-own domains, loaded and grouped for you
  • SSO, an SLA, and the paperworkPriority support with a named contact; DPA, invoicing and the security review your buyer needs
Talk to us → Tell us how many domains and who needs to see them. We size it from there.
Agents & machines
Pay as you go

One metered door, the same for everyone. No seat, no tier, no sales call.

  • One metered API doorThe same /v1 everybody else uses, documented and versioned
  • Keyless preview, then a keyCurl any domain with no account; a key opens the complete record and every read endpoint
  • An API request is 0.05 DomainDrift creditsPast your daily allowance, requests meter from your bought DRM3 balance
  • OpenAPI 3.1, llms.txt, live SSEPublished signing keys, so an agent can verify what it read
  • An MCP server at /mcpSame tools, same keys, same pay gate

Not sure which you need?

Some of these answers send you to a different kind of tool first, and say so.

Open the guide →

Two kinds of credits, one simple rule

Your daily DomainDrift credits refresh every morning and are meant for that day's work in DomainDrift. Use them or lose them; a fresh batch lands tomorrow. Credits you buy are DRM3 credits: they sit in one balance, they work in every DRM3 app you have access to, and they never expire.

DRM3 credits never expire. Features require an active plan.

The short version

20 questions, every answer intact. Open the ones you care about.

What can I actually do with DomainDrift?

Look inside any domain and read its live infrastructure from a signed reading: who runs its DNS, its mail, its hosting and its certificate. Watch the domains you care about and get told the moment one moves. Hold a dated record of what a domain looked like on any day, that anyone can verify. Pull the same data over the API. Monitoring is one use, not the whole product.

Can I look inside a domain I don't own or watch?

Yes. Type any domain and read its current infrastructure from the signed record. The basics are free and need no account; an account opens the full record, the point-in-time history and the lists. Watching is only for the domains you want to be alerted about, not a gate on reading the rest.

How do I prove what a domain looked like on a certain date?

Every reading is Ed25519-signed at the moment it is taken and anchored on Base, so you can hand an auditor, a counterparty or a court a dated record they check themselves against our published key. A signature proves who observed the record and that it has not been altered since. It does not vouch that the reading is correct; it is added trust, not a substitute for it.

Can I see which companies just switched provider?

Yes. The daily list of who moved host, DNS or mail provider is on the site at /migrations: a leads list for sales, and a churn read for everyone else, dated the day the move was read. It is also available over the API for a team that wants to work it in its own tools.

What does a registered account get me?

The complete signed record for any domain (not the preview), every list in full, and point-in-time history. You can also bring your own: put one of your own domains under watch in a group of your own. Webhook alerts ride the paid plans.

Then what is a paid plan for?

Breadth. A rung is sold on how many domains you keep under watch, and the other dials the meter enforces move with it: your included daily DomainDrift credit allowance (app-scoped fuel that refreshes every day at 00:00 UTC and does not roll over), groups, approved baselines, and how far back the signed history goes. Bought DRM3 credits are separate: one balance that works in every DRM3 app and never expires.

Do I need a plan to get a signed evidence bundle?

No. The bundle is bought per export, not unlocked by a rung. A paid plan includes a small monthly allowance of short-window exports; past that, and for the deep whole-archive export at any rung, you pay for the one export you need at the price shown in the table above. Nothing is charged unless you ask for it in so many words, and the price is quoted before anything is debited.

What does monitoring a domain actually do?

Put a domain under watch and it moves onto the watch lane: DomainDrift re-checks its nameservers, mail, certificate, DNSSEC, and reachability there as often as every 5 minutes, keeps the signed history, and alerts you in Slack, Teams, Discord, a webhook, or your inbox within minutes of the reading that catches a material change. Routine churn stays quiet.

What is a domain group?

A set of watched domains you manage as one: your production estate, a client's portfolio, a brand family. Watch it, alert on it, and read it as a unit instead of domain by domain.

What is an approved baseline?

The known-good record you sign off for a domain. From then on, DomainDrift compares every fresh observation against it and flags anything that drifts - a nameserver you did not change, a certificate issuer you did not choose - until you approve the new state.

Why do I get credits every day instead of a big monthly pile?

Because a fresh start every morning is simpler and fairer. You always know you can come back tomorrow and do real work, and you never watch a big balance tick down or expire at the end of a month. Your daily batch is sized for a normal day of using the app.

What happens when I run out of credits?

First we use your daily credits. When those are gone, we use any DRM3 credits you have bought. If both are empty, the app pauses that action and asks if you want to top up. Nothing runs up a surprise bill, and a job already in progress finishes. Your daily credits come back the next morning either way.

Do my credits expire?

Your daily credits refresh every morning, so yesterday's batch is replaced by a fresh one (they do not roll over). Credits you buy never expire. They stay in your balance and work in every app you have access to.

What does an API request cost?

Reads are light. A typical API call costs a small, fixed number of credits, drawn from your daily batch first. You can see the exact cost per action and your remaining balance in your account at any time, so the meter is never a mystery.

If I cancel, do I lose my bought credits?

No. DRM3 credits you bought are yours to keep, forever, even after a plan ends. What changes is that features which need a paid plan close, and your daily batch drops back to the included daily amount. Your bought credits stay spendable anywhere you still have access. Credits are fuel, not a key: they never buy back a paid feature on their own.

What happens if I cancel?

A plan can be cancelled any time; you keep access through the end of the period you paid for, then the account reverts to the registered base. Your account holds your plan, your receipts, and your balance in one place.

Where do I buy more credits?

In your account. Bought DRM3 credits live in one balance that works across every app, so you top up once rather than app by app. Any "buy more" prompt inside DomainDrift takes you straight there.

Why does sign-in go through drm3.network?

DomainDrift is a DRM3 studio app. One DRM3 account signs you into every studio app, your bought DRM3 credits travel with you across all of them, and after sign-in you land right back on the page you came from.

Where do these prices come from?

Straight from the live offer catalog, at page load. A tier marked "soon" is not on sale yet: we would rather say so than print a number you cannot buy. The moment an offer goes live in the catalog, this page shows its real price automatically, and nothing about your account changes when it lands.

Prefer to read the API first?

Everything is one metered door, the same for everyone. Read the API docs or try the playground before you sign up.

CONTINUOUS INTERNET TELEMETRY24H DRIFT4,955 material changesacross 1,803 domains · 24h to ~80m agoROTATION50 domains moved DNS from koaladns.com to kirklanddc.com, 46 moved backa rotation loop, not a migration · 24hEMAIL DRIFT2 domains switched email providertop destination google.comNOW685 curated domains not reachablelast probe, steadySITE ERRORS17,942 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 89,188 sites429 rate-limit / 403 bot-block, a posture signal