How Klaxel works
Plain-English docs for every feature — what it does, how to set it up, and the gotchas worth knowing. New here? Start with the agency guides below.
What we watch
Every check we run on every domain, every day.
Health grade — the A–F score for every domain
Every domain gets an A–F letter grade and a 0–100 score from 14 automated checks across 6 categories, re-scored every day.
ReadTLS certificates — validity, expiry, and SSL posture
Two checks that catch a certificate about to expire — or already invalid — and grade the strength of the TLS the site actually serves.
ReadEmail authentication — SPF, DKIM, DMARC, MX
Four checks on the DNS records that decide whether a domain's mail is trusted — or quietly spoofed and spam-foldered.
ReadWeb security — HTTPS, HSTS, redirects, subdomain takeover
Four checks that make sure the site is actually reachable over enforced HTTPS — and isn't leaking a hijackable subdomain.
ReadIndexability — robots, sitemap, and noindex leaks
Catches the disaster case where a live client page has been silently set to noindex and quietly dropped from search.
ReadDNS & DNSSEC — nameservers and zone signing
Two checks that confirm the domain is properly delegated and, where present, cryptographically signed.
ReadReputation — IP & domain blacklist checks
A daily check of your sending IPs against curated DNS blacklists, so a listing that would spam-folder your mail doesn't go unnoticed.
ReadDomain expiry — the daily expiry guardian
A daily lookup of every domain's true registry expiry date, with escalating reminder emails so a domain never lapses on your watch.
ReadBrand watch — typosquat & lookalike monitoring
Spots lookalike domains that are actually live in DNS and could be used to impersonate your — or your client's — brand.
ReadReporting
Client-ready reports for every domain you monitor.
Alerting
Know the moment something slips.
Alert routing — email, Slack, Microsoft Teams, webhook
Send each client's alerts wherever their team already looks — email on every plan, plus Slack, Microsoft Teams, or your own webhook on Core MSP and Enterprise.
ReadPSA ticketing — turn alerts into ConnectWise service tickets
Route a client's domain alerts straight into your PSA as service tickets — ConnectWise is live on Core MSP and Enterprise, with Autotask coming soon.
ReadSetup & control
Organize your fleet, brand it, tune each domain.
Client groups — organize domains and route alerts
Group domains by client so alerts, reports, and settings apply per client instead of one domain at a time.
ReadPer-domain settings — overrides that win over defaults
Tune one domain independently — its grade-alert threshold, which checks run, its group, and where its alerts go — without touching the rest.
ReadImport your client domains — straight from Hudu
Pull every client website out of Hudu and onto the watch-list in one pass — companies become client groups, websites become monitored domains.
ReadDoc-sync to Hudu — live domain health inside your documentation
Connect Hudu to import client domains in bulk, and (on Core MSP+) push live health grades and expiry dates back into Hudu as Domain Health assets.
ReadAgency guides
Longer reads on the problems Klaxel solves.