# SubdomainWatch - Continuous Attack Surface & DNS Surveillance
> The authoritative perimeter surveillance engine catching dangling DNS takeovers, RFC-7208 SPF lookup limits, and SSL certificate expiration.

## Overview
- [Website](https://www.subdomainwatch.com): Continuous perimeter attack surface surveillance and dangling DNS detection.
- [Architecture & Specification](https://www.subdomainwatch.com/spec): 3-Tier Staging Detection, PostgreSQL Transactional Outbox, and RFC-7489 DMARC Policy Guard.
- [Cloud Signatures Library](https://www.subdomainwatch.com/signatures): Complete signature directory for detecting dangling CNAME takeovers across AWS, GitHub, Heroku, Azure, and more.
- [Commercial Pricing & FAQ](https://www.subdomainwatch.com/pricing): Engineering-focused pricing tiers (Starter $49/mo and Pro $129/mo) with zero per-scan surcharges.
- [Live Defense Console](https://www.subdomainwatch.com/console): Real-time attack surface management, DNS incident alerts, and on-demand perimeter probes.
- [Full LLM Architecture Specification](https://www.subdomainwatch.com/llms-full.txt): Complete detailed text specification for LLMs and AI researchers.
- [Machine-Readable Schema](https://www.subdomainwatch.com/schema.json): Schema and data model specifications for SubdomainWatch.

## Core Capabilities
- [Dangling DNS Takeover Prevention](https://www.subdomainwatch.com/signatures): Continuous resolution against the cloud provider signature library (AWS S3, GitHub Pages, Heroku, Azure, Surge.sh, Shopify) to catch orphan CNAMEs before malicious actors claim them.
- [RFC-7208 SPF & Email Deliverability Guard](https://www.subdomainwatch.com/spec): Recursive include traversal detecting when SPF records exceed the strict 10-DNS lookup limit, preventing PermError mail delivery failures.
- [Multi-Tier SSL Expiry Radar](https://www.subdomainwatch.com/spec): Threshold alerts at 30-day, 14-day, and 7-day windows preventing unexpected SSL/TLS certificate outages.
- [Acid Transactional Outbox](https://www.subdomainwatch.com/spec): PostgreSQL transactional outbox guaranteeing at-least-once incident alert dispatch via Resend and Slack.

## Standards Compliance
- [RFC 7208](https://www.rfc-editor.org/rfc/rfc7208): Sender Policy Framework (SPF) for Authorizing Use of Domains in Email.
- [RFC 7489](https://www.rfc-editor.org/rfc/rfc7489): Domain-based Message Authentication, Reporting, and Conformance (DMARC).
- [RFC 8555](https://www.rfc-editor.org/rfc/rfc8555): Automatic Certificate Management Environment (ACME).