Watch
Know the moment
something breaks.
DMARC reports arrive daily and a spoofing wave does not wait for your morning digest. The issues that matter reach you where you already are, and only once.
POST https://hooks.acme.com/tyi
X-TYI-Signature: sha256=9f1c…
{ "event": "anomaly.crit", "severity": "crit",
"domainName": "acme.com", "url": "…/lookalikes" }What earns an alert
Ten event types, all of them things a domain owner would want to act on the same day. Warnings stay in the action queue and the digest by design.
A critical issue
A new sender failing DMARC at volume, a domain with no policy, a lookalike that sent as you, a Gmail spam rate over the line. Checked on every scan, a few hours apart, and raised the first time it is seen.
Something we did for you
A one-click DNS fix applied, reverted, or failed, within a minute of it happening. A delivery diagnosis completed, or the recovery it was waiting for confirmed. An enforcement watch clearing, or catching a regression.
What it will not do
It never re-alerts a persistent issue: one critical finding is one alert for 14 days, on every channel. It never alerts on warnings, and it never sends a message body anywhere you did not point it.
Where it lands
The in-app bell is on for every plan. From Lite, the same event is emailed the moment it lands, to every teammate who has instant alerts on. Connect Slack on any plan and it posts to your channel with a Fix this button when the issue is one-click-fixable.
From Pro, register up to ten HTTPS endpoints and every event is POSTed as JSON, signed with an HMAC over the timestamp and body so you can verify it came from us, retried four times inside twenty minutes, and carrying a stable event id to dedupe on. Subscribe an endpoint to specific event types or to all of them.
On by default, tuned in a minute
Nothing to turn on
The bell and the daily or weekly digest are on from the first domain. A critical issue reaches the bell on every plan, whatever your digest setting.
Pick your channels
Notifications settings hold the email toggle per teammate, the Slack channel and its two categories (security, DNS fixes), and the webhook endpoints with their event filters.
Act from the alert
Every alert deep-links to the exact page, and a fixable one carries the fix. In Slack that is a button; in email and webhooks it is the link to the staged change.
An endpoint that fails twenty deliveries in a row is paused rather than hammered, and you are told. Redirects are never followed and response bodies are never read.
Included from Lite up.
That is the instant-email line. The bell and Slack are on every plan; signed webhooks start at Pro.
Compare plansThe first alert is
already on.
Add a domain and the bell is live. Wire email, Slack, or a webhook from Settings whenever you want them.