One number decides the price.
A plan is sold on how many domains you keep under watch. Registered watches 5 domains, at $0.
Verify anything. Watch 5 domains.
- 5 domains under watch
- 7 days of signed history
- 1 group, 1 approved baseline
- 60 API requests a day
- No signed evidence bundles
Sold on one number: the domains you keep under watch. Signed proof is bought per export, on the day someone asks.
- 250 domains under watch
- 90 days of signed history
- 10 groups, 10 approved baselines
- 3 signed evidence bundles a month
- 500 API requests a day
Credits top up anything: past your daily DomainDrift credits, a heavy day draws your bought DRM3 credits, not a bigger tier.
Bigger estates, your brand on it, and terms we write with you.
- Domains, groups and baselines named in the contract
- Your brand on the dashboard and on the reports
- A scan cadence we commit to in writing
- SSO, an SLA, and the procurement paperwork
Watch
The rung is sold on this: how many domains you keep under continuous watch.
Operate
Group the estate, sign off baselines, alert on drift, pull the API.
Prove
Show what a domain was, and when, with evidence anyone can verify.
Verify is public for everyone, always: any receipt, any page, and the on-chain anchor, at /verify. No account.
Past the allowance above, one more short-window export is 100 credits ($1.00). The whole signed archive in one export is 2,500 credits ($25.00), and is never included in a rung.
A domain under watchA watched domain moves onto the watch lane: its nameservers, mail, certificate, DNSSEC, and reachability are re-checked as often as every 5 minutes, and every check lands in the signed history. is re-checked as often as every 5 minutes, and you are alerted within minutes of the reading that catches a material change.
No account? Try it now - one command returns a real, current preview of the signed record. No key.
curl https://domaindrift.io/v1/domains/netflix.com
Every paid plan includes
- The complete signed record for any domain, not the preview
- Every list in full - services, certificates, changes, reachability
- Point-in-time history and the time machine on any domain
- Alerts in Slack, Teams, Discord, a webhook, or your inbox, signed on delivery
- CSV export of any list you can see
- The full REST API, the live stream, and the MCP server
Anonymous reads are live, signed and rate limited. Registering opens the whole wire plus your own read key.
For an estate that does not fit a card.
- Your brand on the dashboard and the reportsThe screens your clients see and the evidence you send them, under your name - scoped in the contract
- Custom workflowsThe checks, the thresholds and where each alert lands, shaped to how your team already works
- Reseller and MSP portfolios1,000+ domains across your clients, sized to a cadence we commit to rather than sold from a card
- Your whole estate onboardedBulk bring-your-own domains, loaded and grouped for you
- SSO, an SLA, and the paperworkPriority support with a named contact; DPA, invoicing and the security review your buyer needs
One metered door, the same for everyone. No seat, no tier, no sales call.
- One metered API doorThe same
/v1everybody else uses, documented and versioned - Keyless preview, then a keyCurl any domain with no account; a key opens the complete record and every read endpoint
- An API request is 0.05 DomainDrift creditsPast your daily allowance, requests meter from your bought DRM3 balance
- OpenAPI 3.1, llms.txt, live SSEPublished signing keys, so an agent can verify what it read
- An MCP server at
/mcpSame tools, same keys, same pay gate
Two kinds of credits, one simple rule
Your daily DomainDrift credits refresh every morning and are meant for that day's work in DomainDrift. Use them or lose them; a fresh batch lands tomorrow. Credits you buy are DRM3 credits: they sit in one balance, they work in every DRM3 app you have access to, and they never expire.
DRM3 credits never expire. Features require an active plan.
The short version
16 questions, every answer intact. Open the ones you care about.
What does a registered account get me?
The complete signed record for any domain (not the preview), every list in full, point-in-time history, and signed webhook alerts on change. You can also bring your own: put 5 of your domains under watch in a group of your own.
Then what is a paid plan for?
Breadth. A rung is sold on how many domains you keep under watch, and the other dials the meter enforces move with it: your included daily DomainDrift credit allowance (app-scoped fuel that refreshes every day at 00:00 UTC and does not roll over), groups, approved baselines, and how far back the signed history goes. Bought DRM3 credits are separate: one balance that works in every DRM3 app and never expires.
Do I need a plan to get a signed evidence bundle?
No. The bundle is bought per export, not unlocked by a rung. A paid plan includes a small monthly allowance of short-window exports; past that, and for the deep whole-archive export at any rung, you pay for the one export you need at the price shown in the table above. Nothing is charged unless you ask for it in so many words, and the price is quoted before anything is debited.
What does monitoring a domain actually do?
Put a domain under watch and it moves onto the watch lane: DomainDrift re-checks its nameservers, mail, certificate, DNSSEC, and reachability there as often as every 5 minutes, keeps the signed history, and alerts you in Slack, Teams, Discord, a webhook, or your inbox within minutes of the reading that catches a material change. Routine churn stays quiet.
What is a domain group?
A set of watched domains you manage as one: your production estate, a client's portfolio, a brand family. Watch it, alert on it, and read it as a unit instead of domain by domain.
What is an approved baseline?
The known-good record you sign off for a domain. From then on, DomainDrift compares every fresh observation against it and flags anything that drifts - a nameserver you did not change, a certificate issuer you did not choose - until you approve the new state.
Why do I get credits every day instead of a big monthly pile?
Because a fresh start every morning is simpler and fairer. You always know you can come back tomorrow and do real work, and you never watch a big balance tick down or expire at the end of a month. Your daily batch is sized for a normal day of using the app.
What happens when I run out of credits?
First we use your daily credits. When those are gone, we use any DRM3 credits you have bought. If both are empty, the app pauses that action and asks if you want to top up. Nothing runs up a surprise bill, and a job already in progress finishes. Your daily credits come back the next morning either way.
Do my credits expire?
Your daily credits refresh every morning, so yesterday's batch is replaced by a fresh one (they do not roll over). Credits you buy never expire. They stay in your balance and work in every app you have access to.
What does an API request cost?
Reads are light. A typical API call costs a small, fixed number of credits, drawn from your daily batch first. You can see the exact cost per action and your remaining balance in your account at any time, so the meter is never a mystery.
If I cancel, do I lose my bought credits?
No. DRM3 credits you bought are yours to keep, forever, even after a plan ends. What changes is that features which need a paid plan close, and your daily batch drops back to the included daily amount. Your bought credits stay spendable anywhere you still have access. Credits are fuel, not a key: they never buy back a paid feature on their own.
What happens if I cancel?
A plan can be cancelled any time; you keep access through the end of the period you paid for, then the account reverts to the registered base. Your account holds your plan, your receipts, and your balance in one place.
Where do I buy more credits?
In your account. Bought DRM3 credits live in one balance that works across every app, so you top up once rather than app by app. Any "buy more" prompt inside DomainDrift takes you straight there.
Why does sign-in go through drm3.network?
DomainDrift is a DRM3 studio app. One DRM3 account signs you into every studio app, your bought DRM3 credits travel with you across all of them, and after sign-in you land right back on the page you came from.
Where do these prices come from?
Straight from the live offer catalog, at page load. A tier marked "soon" is not on sale yet: we would rather say so than print a number you cannot buy. The moment an offer goes live in the catalog, this page shows its real price automatically, and nothing about your account changes when it lands.
Prefer to read the API first?
Everything is one metered door, the same for everyone. Read the API docs or try the playground before you sign up.