# domain-protection.info FAQ ## Monitoring basics ### Does monitoring fix problems automatically? No. ostr.io reports monitored website behavior and domain signals so a responsible person can investigate. You or your provider still make any changes. ### What does "free WebSec" cover? WebSec monitors WHOIS, DNS, and SSL/TLS signals and sends domain and certificate expiration reminders. ostr.io presents these domain-protection capabilities as free for users on all plans. ### Do I have to monitor everything at once? No. Start with the customer-facing endpoints and the domain signals that matter most to your operation, then expand coverage as needed. ### Which website pages should I monitor first? Start with the homepage, checkout or booking flow, login page, contact form, and any page customers use to decide whether the business is open and reachable. ## Alerts and ownership ### Who should receive monitoring alerts? Send alerts to someone who can investigate quickly, such as an owner, operations mailbox, technical maintainer, DNS provider contact, or certificate owner. ### When should I add SMS alerts? Use SMS for signals where inbox delay is risky, such as key customer-facing pages, domain expiration reminders, or changes that need owner review outside normal email routines. ### Are DNS and WHOIS changes always bad? No. Many changes are expected provider work, renewals, migrations, or verification updates. Monitoring helps the right person review whether a change matches planned work. ### Does this replace registrar or hosting account security? No. Keep registrar, DNS, hosting, and email accounts secured separately. This site explains detection and alerting signals, not account protection controls.