One unauthorized DNS change can route your entire client's email to the wrong server.
DNS is the nervous system of every domain. A changed MX record stops mail. A swapped A record redirects visitors. A modified TXT record breaks email authentication. Aideworks snapshots every DNS record and alerts you — with a precise before/after diff — the moment anything changes.
DNS changes that agencies discover too late
Most DNS incidents aren't dramatic — they're quiet. The record changed, nobody noticed, and by the time someone complained the damage was done.
The unauthorized change
Nobody on your team touched that record. Either a compromised registrar account, a provider change gone wrong, or a colleague acting outside the process. By the time you find out, mail has been rerouting for hours — or days.
The migration side-effect
Hosting moved, nameservers updated, Cloudflare activated. The A record is correct — but the MX record didn't come along. Client email silently fails for 72 hours while the TTL on the old record expires and nobody is watching.
The TXT record accumulation
Four email providers over three years. Each left an SPF include behind. The SPF record now chains 12 lookups — exceeding the 10-lookup limit. Mail from the current provider fails SPF and lands in spam. Nobody changed anything this week.
DNS diff — logistics-bv.com
Detected: today 08:41 · Previous snapshot: yesterday 08:41
- MX 10 mail.oldprovider.com
+ MX 10 mail.newprovider.eu
A 188.92.11.4 (unchanged)
CNAME www → logistics-bv.com (unchanged)
- TXT "v=spf1 include:oldprovider.com ~all"
+ TXT "v=spf1 include:newprovider.eu -all"
NS ns1.cloudflare.com (unchanged)
NS ns2.cloudflare.com (unchanged)
⚠ Alert sent to team@agency.nl · 08:42
2 record types changed · Last change: 187 days ago
Every record type, every change — nothing slips through
Aideworks takes a full snapshot of every DNS record for every domain you manage. On every check, the current state is compared against the last known state. Any deviation triggers an immediate alert with the exact before/after diff.
All record types monitored
A, AAAA, CNAME, MX, TXT, NS, SOA — every record type in scope. Not just the records you think to configure.
Precise before/after diff in every alert
You see exactly what changed, what was added, and what was removed — in the alert email, not after logging into a dashboard.
Immediate detection on check run
No 24-hour aggregation windows. The moment a check detects a change, the alert fires. On paid plans, checks run every hour or every 15 minutes.
Historical record for every change
Every DNS diff is stored. Review the timeline of every domain's changes — useful for post-incident reviews and client audit requests.
Change frequency context
The alert shows when the last change occurred on that domain. A change on a domain that hasn't changed in 300 days demands more scrutiny than one that changes weekly.
DNS changes are how most email security incidents start.
SPF, DKIM, DMARC, MTA-STS and BIMI are all DNS records. When your client moves to a new email provider, migrates hosting, or a contractor makes a "quick DNS fix" before lunch — those records can change. Aideworks catches it immediately.
Combined with email security monitoring, you get a complete view: not just that a TXT record changed, but what that change means for deliverability and spoofing protection. The alert shows you the diff. The email security check tells you if the new record is valid.
Learn about Email Security monitoring →⚡ DNS change detected — clienta.nl
- TXT "v=spf1 include:old.com ~all"
+ TXT "v=spf1 include:new.eu -all"
Email security re-check triggered
Action needed: DMARC policy is not enforced. Spoofing remains possible.
Catches changes you didn't make
Automated checks don't rely on manual tracking or team communication. Any record change — whether made by a colleague, a provider or a threat actor — appears in the alert.
Built for multi-client portfolios
One dashboard with all your clients' DNS activity. Filter by domain, review the diff, and notify the relevant account manager — without switching between tools or clients.
The audit trail clients ask for
When a client asks "what happened to our DNS last March?", you have an answer. Every change is stored with a timestamp and the exact diff — useful for compliance, insurance and post-incident reviews.
Works best alongside
Start monitoring today
Unlimited domains, manual checks always included. Every domain you add gets a 7-day trial of full automation — no credit card required.