NSGuard

NSGuard is a web app (with a lightweight CLI) that continuously audits your domains’ DNS and registrar settings and alerts you before outages happen. It runs scheduled checks for common failure modes: expired domains, missing/incorrect NS glue, broken delegation chains, DNSSEC mis-signing, CAA mistakes that block certificate issuance, MX/SPF/DKIM/DMARC drift, and accidental record deletions. Instead of generic “DNS is down” pings, it explains the exact root cause and the fastest fix, linking to the offending records and showing the expected state. It also supports “DNS baselines” per environment (prod/staging) so teams can detect unintended changes immediately. This is not a DNS provider; it’s a monitoring and configuration safety net that works across Cloudflare, Route 53, Google Cloud DNS, Azure DNS, and common registrars via APIs where available, and via authoritative lookups where not.