Theft Guard · DNS baseline
Theft Guard for silent DNS and registrar moves.
Theft Guard records each domain's registrar and nameservers as a baseline, checks them against it (daily on Free, up to hourly on Enterprise), and alerts you in Requires Your Attention when they change. It alerts only, so keep your registrar lock and 2FA on.
Aepto
24 / 24 healthy
All clear
northline.com200 OKAI diagnosis
See it in the product
Baseline vs now. Named risk. Same Attention queue as uptime and renewals.
Baseline vs now, the hijack signal
- When nameservers or the registrar leave the set Aepto learned, you get a named alert, not a raw zone dump.
- Aepto does not promise unstealable domains. Keep your registrar lock and 2FA on.
- Visitors can land on a phishing page while an uptime check stays green, because something still answers.
Theft Guard does not replace registrar locks, 2FA, or clientTransferProhibited. It tells you when something moved so you can act.
Why locks alone are not enough
Locks help. Account hygiene helps. You still need to notice when the baseline moves.
-
Something changes
NS or registrar leaves the learned set. Traffic and mail can already be following the new path.
-
Aepto names it
Theft Guard puts a clear item in Requires Your Attention instead of hoping someone opens the registrar by luck.
-
You act at the registrar
Locks, 2FA, recovery, and vendor support stay where they belong. Aepto shortens time-to-notice.
How does Theft Guard fit with locks and 2FA?
- Names across registrars land in one triage queue, next to renewals, SSL and uptime.
- Domain Watch is for names you do not own yet. Theft Guard is for names already in your inventory. Neither buys domains or locks the registry.
- Minutes matter: phishing pages and mail reroutes do not wait for your next registrar login. Theft Guard shortens the time to notice, so locks and recovery can still help.
- Check frequency by plan: daily on Free and Starter, twice daily on Professional, Business and Agency, hourly on Enterprise.
What is Theft Guard for, and what is it not?
Early notice when control of a domain moves.
- Hosting providers with many customer names cannot open every registrar each morning.
- An agency managing client brands cannot wait for "the site looks weird" Slack messages.
- An investor with defensive names sees these alerts beside renewals and SSL.
- What it is not: a registrar lock, a transfer cancel button, or a promise that a domain cannot be stolen. Locks and 2FA still matter.
How often does Theft Guard check?
Check frequency rises with the plan. Every plan includes Theft Guard.
| Plan | Check frequency | Domains | Price |
|---|---|---|---|
| Free | Daily | 3 | Free |
| Starter | Daily | 10 | $9 a month |
| Professional | Twice daily | 25 | $29 a month |
| Business | Twice daily | 50 | $59 a month |
| Agency | Twice daily | 150 | $129 a month |
| Enterprise | Hourly | Custom | Custom |
Theft Guard alerts on drift. Keep your registrar lock and 2FA on. See DNS monitoring for record-level history.
Common questions
Does Theft Guard replace registrar locks?
No. Theft Guard alerts on unexpected nameserver or registrar moves against a learned baseline. It complements registrar locks, 2FA, and clientTransferProhibited. It does not stop a transfer at the registry.
What does it watch?
Unexpected nameserver and registrar changes tied to the domain's learned baseline, so silent moves do not stay silent until email breaks or traffic redirects.
Is it only for enterprise?
Theft Guard is available across plans. Higher plans increase analysis cadence. Alerts go to your contacts and, on paid, webhooks to Slack, Teams, Discord, or HTTP.
How is this different from Domain Watch?
Domain Watch tracks status for names you do not own yet (alerts only). Theft Guard watches names already in your inventory for baseline NS and registrar drift.
How often does it run?
Daily on Free and Starter, twice daily on Professional, Business and Agency, and hourly on Enterprise.
Notice the move before customers do.
Start free. Keep registrar locks on. Let Aepto watch the baseline.