# What ZRAZU monitoring checks

> Monitoring watches your domain, delegation, DNSSEC, certificate, mail and website, and writes to you only when something is really broken.

URL: https://zrazu.com/en/docs/monitoring-checks/

Monitoring in the [cabinet](https://vse.zrazu.com/monitoring/) watches your domains all the time. You do not set up checks by hand: it is enough for the domain to be on the list.

## What we check

Each check is a separate "layer".

| Layer | What it covers |
| --- | --- |
| Registry | Whether the domain is switched off, expired, or being moved to another registrar |
| Delegation | Whether the domain's DNS servers respond |
| DNSSEC | Whether keys and signatures are in place and the registry record matches |
| Certificate | Whether the SSL certificate has expired or expires in 7 days or less |
| Mail | Whether the domain's mail host works |
| Website | Whether the website opens |
| CT logs | Certificate Transparency logs for your domain |

Not every layer is on every plan, see [plan and adding domains](https://zrazu.com/en/docs/monitoring-add.md).

## Your own and external domains

- **Your domains in ZRAZU** are checked automatically every minute, with all layers. They do not count against the free limit.
- **External domains** are registered elsewhere. You add them yourself. The free plan covers 25 domains with a check every 15 minutes.

If you made a transfer or an NS change through ZRAZU, we know about it and do not treat it as an outage.

## When we decide it is a problem

One failed check is not an alarm. An incident opens only when at least two check points confirm the problem and it repeats three times in a row within three minutes. This way a short network glitch does not fill your inbox.

Advice such as "set up DMARC" is not an outage. You see it on the domain page, but it will not wake you up. If a layer could not be checked, we say neither "all good" nor "broken".

## What counts as serious

We always tell you, even at night, when: the domain is switched off by the registry, the zone does not respond, the domain is being moved to another registrar, the term has expired, or DNSSEC keys or signatures are broken. Read about [notifications and quiet hours](https://zrazu.com/en/docs/monitoring-alerts.md) separately.

## If it didn't work

- **The domain is not on the list.** Add it following the [instructions](https://zrazu.com/en/docs/monitoring-add.md).
- **The "Website" layer is missing.** It is not available for external domains on the free plan.
- **"Paused: plan limit" next to a domain.** You have more domains than your plan allows. Choose a plan with a higher limit.
- **Monitoring shows "not checked yet".** The domain was just added, wait for the first check.