Straight answers to the questions that matter.

They're different failure modes. A certificate expiring is usually a quick fix; losing a domain because its registration lapsed, or its registrar or nameservers changed without you doing it, is a much bigger problem - and neither shows up in an SSL check. We check them independently so a clean certificate never gives a false sense of security about the domain itself.

A single 0-100 number and a letter grade, A through F, for each domain. It starts at 100 and loses points for confirmed problems - an expiring cert, an incomplete chain, a missing DMARC record - never for something we simply don't know yet (an unreachable WHOIS server, for instance). Every deduction is listed by name, so the score is always explainable, never a black box.

Both are available. The dashboard gives you a fleet-wide view, and paid plans receive a monthly PDF with domain risk scores, recent alerts, and upcoming expirations.

Yes. Up to 90 days of hourly full-check history is retained. Each domain page shows recent health and response-time trends so you can spot patterns instead of only seeing the latest result.

Two ways. Threshold-based: when a certificate or the domain's own registration crosses a warning line you've enabled (a set number of days or hours out, or the moment it actually expires). Change-based, always on regardless of thresholds: DNS stops resolving, HTTP or HTTPS stops working, a certificate chain becomes incomplete or its hostname stops matching, a registrar or nameservers change, DNS records change, or SPF/DKIM/DMARC records change.

The account owner always does. Beyond that, any teammate you've invited can be individually toggled on to also receive alerts, on every plan, for everyone on your team. You can also add a limited number of extra email addresses that aren't tied to a team member account, which is what your plan's recipient limit governs.

On Starter and Premium, each domain can override the account's default thresholds and recipients. A reset returns one domain—or every domain at once—to the account defaults. Free uses account-wide defaults only.

From Manage → Team, available from Starter up. Enter their email and pick a role. They get an email invite, and if they don't have an upwhisper account yet, signing up with that exact email address joins them straight into your account with the role you chose.

Yes. The Activity page logs domains added or removed, notification and recipient changes, invites sent, and role changes, along with who did it and when.

Adding another domain is blocked with a clear message telling you to upgrade. Nothing gets silently dropped or half-added.

Yes, any time, from Manage → Billing. If you downgrade below your current domain count, we keep your oldest domains up to the new plan's limit and remove the rest, with a warning before it happens.