Your client asks how their site is doing. Now you have a grade.

Every client domain checked twice a day: registration expiry, certificate expiry, SPF, DMARC, MX. One grade per client, a push when it drops.

Get the launch link $79 one-time, full source, yours forever

The pain

Agencies bill monitoring as a service line, then assemble it from tabs: a registrar dashboard here, an SSL checker there, an MX toolbox somewhere else, none of it client-shaped. The reporting incumbents price by the client and it compounds: AgencyAnalytics runs $20 per client per month billed annually (pricing, as of Sep 2026), which is $400 a month at twenty clients and still growing with every win.

Report Card is the infrastructure page of that client report as source code you own: one payment, every client, on your own Cloudflare account.

How it grades

One grade per client
A client wears their worst domain's grade, computed from a printed rubric you can defend in a meeting. No scores invented by a model, no weighting you cannot explain.
Push on the drop, digest on the week
A grade drop pushes to your phone the moment a check first sees it. Monday brings one digest of the whole roster, worst client first, ready to paste into a client update.

Weekly report card:

D  Harbor Legal

B  North Cafe

A  Acme Dental

The weekly digest in the exact format the kit sends: one line per client, worst first. Client names here are the kit's own test fixtures, not customers.

Fa domain registration or certificate is expired
Dany expiry within 7 days, or MX records missing
Cany expiry within 14 days, or no DMARC record
Bany expiry within 30 days, SPF missing, or DMARC at p=none
Anone of the above
Registration expiry via RDAPStraight from each TLD's registry, bootstrapped from IANA's public index. No registrar logins.
Certificate expiry via public CT logsUnexpired certificates first with a full-history fallback, so big domains read correctly and expired ones still say so.
Email posture over free DNSSPF presence, DMARC policy, MX records, checked over DNS-over-HTTPS. No credentials anywhere in the app.
Honest about no dataA lookup that does not answer shows "no data" and never worsens a grade. The app does not guess.
Real iPhone pushEncrypted Web Push from the installed home-screen app (iOS 16.4+). Test-ping button included.
Private by defaultEvery API route sits behind your admin token, compared as constant-time digests.

Why pay $79 when AgencyAnalytics exists?

AgencyAnalytics is a full marketing-reporting suite at $20 per client per month billed annually (pricing, as of Sep 2026), and if you need SEO and ads dashboards, it earns that. Report Card covers the infrastructure page only: expiry, certificates, email posture. At twenty clients the suite bills $400 a month; Report Card is $79 once for as many clients as your instance covers.

 AgencyAnalyticsReport Card
Price$20/client/mo billed annually$79 once, every client
CoversSEO, PPC and social reportingDomain expiry, certificates, email DNS
Client share linkYes, client-facing reportsNot yet; the digest is pasteable
Where data livesTheir serversYour Cloudflare account
AlertsHosted alertingiPhone and Web Push

If your clients expect marketing dashboards, buy the suite. Report Card is for the agency that wants the infrastructure page graded, pushed to their phone, and pasted into the client update, paid once.

Up and running in about 10 minutes

You'll need a Cloudflare account and ten minutes in a terminal. Total hosting cost: $5/month, paid to Cloudflare.

Create the database and apply the included schema.
Run the included key generator, set your secrets.
One deploy command. Add clients and their domains from your phone, tap Enable alerts.

The README walks every step, including the Windows trap that corrupts secrets when you pipe them the wrong way.

Questions before you buy

How many domains can it watch?

Checks run every 12 hours, 5 to 6 upstream lookups per domain, spaced 1.5 seconds apart to stay polite to the free registries. The design comfortably covers 60 to 80 domains per instance inside Cloudflare's scheduled-run window. We have not load-tested past that; a bigger roster deserves a second instance or an email first.

Can I show it to clients?

The grades and the digest are written to be pasted into client updates, and the rubric is printed so you can defend every letter. The app itself is your private tool behind your admin token; a client-facing share link is not in this version.

Does iPhone push work?

Yes, from the installed home-screen app on iOS 16.4 or later. That requirement comes from Apple. The kit ships a test-ping button so you can prove the pipe end to end in your first ten minutes.

What do I get?

The full TypeScript source: Worker, parsers, grading rubric, React app, schema, VAPID generator, test suite, and the README. No obfuscation, no license server. Use it for unlimited personal and client work; the one thing you cannot do is resell the kit itself.

What is it NOT?

It is not uptime monitoring, not a DMARC report parser, and not a marketing dashboard. It grades the infrastructure facts that free public data can prove: expiry dates and email DNS posture. Private CAs and internal-only domains are out of scope.

Get it

Full TypeScript source

Unlimited clients and domains per instance

Free updates to the kit

License terms ship inside the kit

$79 one-time, planned launch price

Launching soon. Leave your email and the launch link lands in your inbox the moment it is live. One email, no list, no spam.