Every domain you own or manage, watched across 14 automated checks — and graded A–F.
Add your domains once. Every day we run a domain-expiry guardian plus 14 automated health checks — TLS, email auth (SPF/DKIM/DMARC/MX), DNS, DNSSEC, web security and blacklist reputation — distilled into one letter grade per domain — and email you the moment anything slips. Dead simple.
Daily RDAP checks
We query the registry's official RDAP record for every domain, every day.
Escalating alerts
One email at 60, 30, 14, 7 and 1 day out — louder as the deadline nears.
Zero busywork
Paste a list of domains and forget it. We watch so you don't have to.
Everything we watch, graded A–F.
14 automated checks across 6 categories, plus expiry and brand monitoring — re-run every day. Every domain is distilled into one letter grade you can act on, so a quiet misconfiguration can't cost you deliverability, security or uptime.
The 6 graded categories
Also watched — not part of the grade
Separate signal — never changes your grade
The expiry guardian reads each domain's real expiry date straight from the registry every day and counts down to it. As the date approaches it sends escalating reminder emails — 60, 30, 14, 7, and 1 day out, and again on the day it expires — so the renewal never slips past unnoticed. It's a best-effort reminder: you still own renewing your own domains.
Separate signal — never changes your grade
Brand watch generates lookalike variations of each domain — typos, homoglyphs, TLD swaps — and checks which ones actually resolve in DNS. When a new lookalike goes live, it alerts you exactly once. It's a separate panel and alert, not a health signal: it never changes the 0–100 grade.
Learn how it worksReports you can hand to the client
Once a month, each client group's last 30 days of monitoring becomes a white-labeled report — your agency's name, color, and logo, with zero Klaxel branding — delivered as a branded PDF and a shareable hosted link.
You decide who gets a report — set an account-wide default, then flip any individual client on or off. A client only ever receives a report if you've turned theirs on; Klaxel never emails your clients behind your back.
White-label reports — your branding, per clientA monthly, client-ready report per client group — your agency's name, color, and logo, with zero Klaxel branding.
White-label reports turn a client group's last 30 days of monitoring into a branded PDF and a shareable hosted link, emailed once a month. You decide who gets one: an account-wide default in Settings (on by default) plus a per-group Monthly-report toggle on each client-group card. You set your agency name, accent color, and logo; the report carries your brand and none of ours. It's a Core MSP / Enterprise feature, and it's honest about gaps — unscanned or too-new domains never get fabricated numbers.
Learn how it worksAlerting — the moment something slips
Per-signal break/recover alerts the instant TLS, email auth or availability regresses; a grade-drop alert when a domain's letter grade falls; and an escalating alert cadence as each expiry deadline nears. Route each client's alerts wherever their team already looks — email on every plan, plus Slack, Microsoft Teams, your own webhook, or a ConnectWise PSA ticket on Core MSP and Enterprise (Autotask coming soon) — and every route is proven with a test send before it goes live.
Alert routing — email, Slack, Microsoft Teams, webhookSend each client's alerts wherever their team already looks — email on every plan, plus Slack, Microsoft Teams, or your own webhook on Core MSP and Enterprise.
Alert routing decides where a domain's alerts land. Point a client group at an email address, a Slack or Microsoft Teams channel, or a generic JSON webhook, and every alert for that group's domains is delivered there. A single domain can override its group with its own route when one client needs something different. Email routes are included on every plan; Slack, Teams, and webhook destinations are available on the Core MSP and Enterprise plans.
Learn how it worksPSA ticketing — turn alerts into ConnectWise service ticketsRoute a client's domain alerts straight into your PSA as service tickets — ConnectWise is live on Core MSP and Enterprise, with Autotask coming soon.
PSA ticketing is an alert destination that opens a service ticket in your PSA instead of (or alongside) an email or chat message. Point a client group at a ConnectWise board and every alert for that group's domains lands as a ticket on the right board, routed to the right company — so a slipping grade or an expiring certificate becomes a tracked ticket in the tool your techs already live in. It's a Core MSP and Enterprise feature: ConnectWise is live today, and Autotask is coming soon.
Learn how it worksSet it up once, run your whole fleet
Organize domains by client, brand their reports and route their alerts, and tune any single domain independently — its grade threshold, which checks run, and where its alerts go.
Just watching your own handful of domains? You can skip this entirely — every domain works on sensible defaults out of the box.
Client groups — organize domains and route alertsGroup domains by client so alerts, reports, and settings apply per client instead of one domain at a time.
A client group organizes domains by the client they belong to, and it's also the container for alert routing and white-label reports. Domains in a group inherit the group's alert routes, and each group gets its own monthly report. Groups are created and managed on the Client groups tab, but domains are assigned to a group on the Domains tab.
Learn how it worksPer-domain settings — overrides that win over defaultsTune one domain independently — its grade-alert threshold, which checks run, its group, and where its alerts go — without touching the rest.
Per-domain settings let one domain behave differently from your account defaults, and the per-domain choice always wins. You can set a domain's own grade-alert threshold (including muting it), turn individual checks on or off, assign it to a client group, and override where its alerts go. The controls are split across two tabs, and editing them never fires a spurious alert.
Learn how it worksImport your client domains — straight from HuduPull every client website out of Hudu and onto the watch-list in one pass — companies become client groups, websites become monitored domains.
Instead of typing domains in one by one, connect your Hudu instance and import them all at once. Companies in Hudu become client groups, websites become monitored domains, and you see a full preview — how many domains, which groups, and anything that will be skipped and why — before a single thing is written. Importing is included on every plan.
Learn how it worksDoc-sync to Hudu — live domain health inside your documentationConnect Hudu to import client domains in bulk, and (on Core MSP+) push live health grades and expiry dates back into Hudu as Domain Health assets.
Doc-sync connects Klaxel to your Hudu instance. Reading is included on every plan: import your clients' domains straight from Hudu's Websites, grouped by company, and keep them in sync daily. Writing back is a Core MSP and Enterprise feature: after each nightly sync, every synced domain gets a “Domain Health” asset in Hudu carrying its live health grade, domain expiry, SSL expiry, last-checked date, and a link to the client's report — and the expiry dates feed Hudu's own Expirations alerts.
Learn how it works