SaaS Domain Monitoring — Shieldome Docs

How SaaS monitoring works

Register one or more domains in the Monitoring tab. Shieldome automatically runs recurring scans on your schedule (weekly on Starter, daily on Pro and Agency) and sends an email alert when new findings appear since the last scan. Only delta findings are included in the alert — you won't be notified about issues you already know about.

💡

14-day free trial on all plans — no credit card required. Your first monitored domain is active immediately after registration.

Plans and quotas

Plan	Domains	Scan frequency	Subdomain discovery	Port scanning	CVE detection	Compliance reporting
Starter	1	Weekly	—	—	—	—
Pro	5	Daily	Yes	Yes	Yes	—
Agency	20	Daily	Yes	Yes	Yes	Yes

Adding and removing domains

Open the Monitoring tab in the app. Click Add Domain, enter the root domain (e.g., example.com — not a full URL), and choose the scan type (Full, Vulnerability only, or Performance only). Shieldome verifies you can reach the domain before saving.

To remove a domain, click the trash icon next to it in the domain list. Removing a domain stops future scans immediately. Historical scan data is retained for 90 days.

Delta alerts

Alert emails show only findings that are new since the previous scan. Each alert includes:

The domain name and scan timestamp
A summary table: Critical / High / Medium / Low new finding counts
A detail list of each new finding with severity, title, and remediation link
A link to the full scan result in the dashboard
A link to view the scan diff vs. the previous run

ℹ️

If a scan produces no new findings, no alert is sent. You only receive emails when something changes.

Webhook alerts

In addition to email, you can configure a webhook URL per domain. The webhook fires after every completed scan (not only when new findings appear) with a JSON payload:

json — webhook payload

{
  "event":          "monitoring.scan_complete",
  "domain":         "example.com",
  "scan_id":        "a1b2c3d4-...",
  "new_findings":   3,
  "risk_score":     42,
  "risk_delta":     +7,
  "scan_url":       "https://yourdomain.com/scan/a1b2c3d4"
}

Pro / Agency features

Subdomain discovery

Shieldome enumerates subdomains using passive DNS and certificate transparency logs before each scan, then scans each discovered subdomain. New subdomains found since the last run are highlighted in the monitoring dashboard.

Port scanning

Top 1000 TCP ports are scanned after each domain scan. Open ports that weren't present in the previous run trigger an alert. Port scan results are included in compliance reports.

CVE detection

Shieldome cross-references detected software versions (from headers, HTML, and JavaScript) against the NVD CVE database. New CVEs matching your tech stack trigger high-priority alerts.

FAQ

Will monitoring scan my production site?

Yes. Monitoring uses the same passive scanner as manual scans — no destructive payloads, no active exploitation. The scanner makes standard HTTP requests a visitor would make. It does not write data, trigger purchases, or modify application state.

Can I pause monitoring without removing a domain?

Yes. Click the toggle next to any domain in the monitoring list to pause/resume scanning. Paused domains retain their history.

How do I cancel?

Go to Settings → Billing → Cancel subscription. Your plan stays active until the end of the billing period. Monitored domains are deactivated at period end but scan history is retained for 90 days.