ZoneDiff

ZoneDiff is a web app (with optional CLI) that continuously monitors your DNS zones and alerts you when something changes, drifts, or is about to expire. It pulls records from authoritative sources (via provider APIs where possible, or AXFR/DoH lookups when not), normalizes them, and stores versioned snapshots so you can diff “what changed” in plain English. The MVP focuses on the boring but painful stuff: unexpected record edits, missing SPF/DKIM/DMARC, NS changes, TTL anomalies, and certificate/CAA mismatches that cause outages or email deliverability hits. It supports scheduled checks, on-demand audits, and incident-friendly exports (diff report + timeline). This is not a full DNS management replacement; it’s a guardrail layer that works across providers and accounts, and it’s built for teams that already have messy DNS sprawl.