Monitoring
Monitoring
How Infraova continuously watches infrastructure — monitoring frequency, DNS checks, authentication, SSL, reputation, and domain state.
What monitoring does
Monitoring is the continuous observation layer. Infraova watches every domain in your organization at regular intervals — checking that the infrastructure is configured correctly, that authentication records are valid, that certificates are not expiring, and that reputation signals are healthy. Monitoring runs automatically in the background. You do not trigger it manually and you do not need to be logged in for it to run.
What Infraova monitors
For each domain, Infraova monitors DNS configuration, email authentication records, SSL certificates, domain reputation, and domain state. DNS monitoring checks that expected records exist and contain valid values. Authentication monitoring checks SPF, DKIM, and DMARC — whether they exist, whether they are syntactically valid, and whether they are configured to enforce policy. SSL monitoring checks certificate validity and expiry. Reputation monitoring pulls signals from blacklists and, where connected, from Google Postmaster.
Monitoring frequency
Infraova runs monitoring checks on a regular schedule. Critical checks — authentication records, DNS propagation, SSL expiry — run frequently. Reputation and blacklist checks run on a longer interval. The monitoring schedule is managed automatically. When Infraova executes a remediation, it runs an immediate verification pass outside the normal schedule to confirm the change worked.
Note
Monitoring frequency is managed by Infraova based on check type and domain risk level. Domains with active issues or recent changes are checked more frequently.
DNS checks
DNS monitoring checks that the records Infraova expects to find are present and valid. For authentication, this means checking that SPF TXT records exist and parse correctly, that DKIM selector records are present and contain valid public keys, and that DMARC TXT records exist and contain a valid policy. It also monitors MX records for changes that could affect mail routing, and NS records for unexpected delegation changes.
SSL and certificate monitoring
Infraova monitors SSL certificate validity and expiry for each domain. A certificate within 30 days of expiry triggers a warning. A certificate within 7 days of expiry triggers a critical issue. An expired certificate triggers an immediate critical issue. Certificate monitoring covers the apex domain and any subdomains Infraova has visibility into through connected DNS zones.
Reputation monitoring
Reputation monitoring checks whether a domain or its associated IPs appear on known email blacklists. A blacklisting triggers an issue immediately — blacklist appearances are treated as critical unless the blacklist is low-significance. Where Google Postmaster is connected, Infraova also monitors Gmail's domain reputation signal, which is one of the most reliable indicators of deliverability health for domains sending to Gmail.
Monitoring history
Every monitoring check is recorded. The monitoring history for a domain shows the state of each check over time — when it was healthy, when it degraded, when it recovered. This history is the foundation for the audit trail and for the operational reports Infraova generates. It is also how Infraova detects changes — by comparing the current state to the previously known state.