Bubble SSL provisioning stalls
silently after client DNS changes.
Bubble agencies build no-code web apps for clients who control their own domains. When a client migrates to a new registrar or switches nameservers, the CNAME delegation to bubble.io breaks without any platform notification. Bubble's SSL provisioning stalls silently and the app goes offline. Merlonix monitors the full SSL and DNS layer so you catch the break before your client does.
No credit card either way — start free, or trial the full workspace.
- Check cadence (Agency)
- 1 min
- SSL pre-expiry alert
- 30 days
- Encrypted DNS lookups
- DoH
- Vendors watched
- 11
Where Bubble agencies get caught out
Three failure modes specific to Bubble client portfolios.
Bubble agencies manage client apps where SSL failures take the entire app offline — not just a secondary page. These failure modes share a common characteristic: they are silent. Bubble does not alert agencies when SSL provisioning stalls or DNS breaks.
CNAME provisioning stall
Bubble SSL provisioning stops when the bubble.io CNAME breaks
Bubble provisions SSL for custom domains via CNAME delegation to its infrastructure. When a client changes nameservers or migrates registrars, the CNAME pointing to bubble.io must be manually recreated at the new provider. This step is frequently missed. Bubble's SSL provisioning does not retry visibly — the app serves without a certificate until the CNAME is restored and provisioning succeeds. There is no platform notification to the agency while this happens.
Multi-environment subdomain drift
Staging and API subdomains break independently of the main app domain
Bubble agencies commonly configure clients with multiple subdomains: the main app domain, a staging environment at a separate subdomain, and API or webhook endpoints at additional subdomains. Each subdomain requires its own CNAME delegation and SSL certificate. A nameserver migration that corrupts the main CNAME often leaves staging and API subdomains in different broken states — requiring separate diagnosis per subdomain rather than a single fix.
Domain expiry on client registrars
Client-controlled domain registrations lapse without agency visibility
No-code clients who use Bubble are often non-technical founders or small businesses who registered their domain independently. Domain renewal is a manual process they manage themselves — with auto-renewal that can fail if the payment method lapses. When a client domain expires, every Bubble subdomain on that domain goes offline regardless of SSL certificate validity. The agency has no visibility into the registrar renewal status unless they monitor domain expiry directly.
How it works
SSL and DNS monitoring for every Bubble client domain.
Merlonix is designed for agencies managing client portfolios on platforms like Bubble where custom domain SSL provisioning is opaque and DNS failures silently take entire apps offline. One account covers every client, every subdomain, with alerts that fire before users notice.
01
Add client app domains and all configured subdomains
Verify ownership with a DNS TXT record for the apex domain. All subdomains — staging environments, API endpoints, webhook targets — are added without additional verification. Takes under two minutes per client. Monitoring starts immediately after verification.
02
CNAME integrity monitoring for Bubble delegations
A DNS-over-HTTPS resolver verifies every CNAME delegation to Bubble's infrastructure on every check interval. When a client's nameserver migration drops the CNAME or changes it to the wrong target, the alert fires within minutes — before any app user sees a failed SSL connection.
03
SSL chain validation for every subdomain
Full certificate chain monitoring for every subdomain in the client's Bubble configuration. Expiry date, chain completeness, issuer, and domain match validated on every check. SSL provisioning failures fire immediately. Expiry warnings fire 30 days ahead, giving time to fix CNAME issues before certificates lapse.
04
Domain expiry monitoring for client-controlled registrars
Merlonix monitors domain expiry dates directly for every client domain, alerting 30 days before the expiry window. For no-code clients who manage their own domain registrations, a 30-day lead time is sufficient to contact the client and confirm renewal before the domain stops resolving.
What the numbers mean for Bubble agencies
Monitoring built for no-code client infrastructure.
Bubble agencies manage client apps where SSL and DNS failures take the entire application offline — not just a secondary page. Merlonix gives Bubble agencies the signal quality and lead time to fix failures before client apps go down.
< 10 min
Time from DNS change to alert — catches Bubble CNAME drift before app users see a connection failure
30 days
SSL expiry warning lead time — time to fix CNAME issues on Bubble custom domains before certificates expire
DoH
Every DNS record checked over an encrypted DNS-over-HTTPS resolver each interval — catches propagation issues and record drift
250 assets
Maximum monitored domains on the Agency plan — covers main app domains, staging subdomains, and API endpoints across a full Bubble client roster
Pricing
Flat monthly fee. Every domain and subdomain included.
No per-domain charges. No per-subdomain fees. Pick the tier that fits your Bubble client count and grow without billing surprises.
Starter
For consultants managing a small Bubble client portfolio.
$19/ month
- 15 monitored assets
- 3 seats
- 5 min check cadence
- SSL + DNS + vendor monitoring
- Email + Slack alerts
Team
For Bubble agencies with multiple no-code app clients.
$79/ month
- 60 monitored assets
- 10 seats
- 1 min check cadence
- SSL + DNS + vendor monitoring
- Email + Slack alerts
Agency
For agencies with a full Bubble client roster including staging and API subdomains.
$199/ month
- 250 monitored assets
- Unlimited seats
- 1 min check cadence
- SSL + DNS + vendor monitoring
- Email + Slack alerts
Compliance
For regulated-vertical teams that need continuous, audit-ready evidence.
$699/ month
- 500 monitored assets
- Unlimited seats
- 1 min check cadence
- SSL + DNS + vendor monitoring
- Email + Slack alerts
Beyond uptime
More than a 200 OK on every client site
The same account also watches the infrastructure and reputation layers a standard uptime check never reaches — each a live check you can turn on.
Turn monitoring into revenue
Resell client-ready reports as your own
Monitoring doesn’t have to be a cost line. Package the branded report and white-label status page as a deliverable in your retainer — the tooling underneath stays invisible, so to the client the work is yours.
Reports under your brand
Hand each client a polished SSL, DNS, and security report carrying your agency’s name and logo — not ours.
Status pages on their domain
Publish a live status page at status.theirbrand.com with automatic TLS and no “Powered by Merlonix” badge.
Your margin to keep
You pay one add-on cost and package it into the retainer you already bill. The markup — and the margin — are yours.
Common questions
Frequently asked questions
Do I need DNS or registrar access to my clients’ domains to monitor them?
No. Merlonix monitors from the outside in — it probes each domain’s public SSL certificate, DNS records, WHOIS/registration data, and HTTP responses the same way a browser or DNS resolver would. You add an asset by its hostname; no access to the client’s registrar, DNS provider, or servers is required.
What does Merlonix actually check on each site?
Every monitored asset gets continuous SSL-certificate (expiry, issuer, and chain changes), DNS-record, domain-registration/expiry, and uptime monitoring by default. You can also enable infrastructure and reputation checks a standard uptime monitor never reaches — security headers, DNSSEC/DANE, domain-hijack/registrar-lock, blocklist, and cron/heartbeat monitoring — each a live check you turn on per asset.
How often does it check, and how do alerts reach me?
Checks run on your plan’s cadence — as often as every 1 min on Team and above, and every 5 min on Starter. When a certificate, DNS record, registration, or response changes, you get an alert by email and Slack. Alerts fire on real state changes between definitive checks, not on a transient blip.
How much does it cost, and is there a free option?
Yes — there is a free $0 plan (no credit card) to watch a small number of assets, and paid plans start at $19/mo (Starter). You can also start a 14-day full-workspace trial with no card. See the pricing grid above for the assets, seats, and check cadence on each tier.
Know before the Bubble app goes offline.
Add your first Bubble client domain in under two minutes. The first SSL or DNS alert tells you whether monitoring was worth it — usually within the first week. 14-day trial, no card required.