# Monitor Outbound Domains

Zen Firewall by Aikido allows you to monitor outbound domains and IP addresses.

### Use Cases <a href="#use-cases" id="use-cases"></a>

* **Detection of Shadow IT:** are developers knowingly or unknowingly sharing production data with 3rd parties (eg [api.openai.com](http://api.openai.com) )
* **PII Leakage**: Avoid accidental leakage of PII or sensitive data to 3rd parties
* **Compliance:** Map existing data streams for compliance.

> When you have setup Zen, outbound domain monitoring works **out-of-the-box.**

### Future <a href="#future" id="future"></a>

* Block certain outbound domains so app is safe against SSRF
* PII leakage to unsanctioned 3rd party services

### How to monitor your outbound domains <a href="#how-to-monitor-your-outbound-domains" id="how-to-monitor-your-outbound-domains"></a>

Select a specific app and continue to the Outbound Domains tab. You will get a full overview of all outbound domains.

![Demo App outbound domains table showing hostnames, ports, and last seen times.](/files/DHZAlrXdfGJqEWbGNUYJ)

### Get notified when new outbound domains were detected <a href="#get-notified-when-new-outbound-domains-were-detected" id="get-notified-when-new-outbound-domains-were-detected"></a>

Knowing when your apps connect to new external destinations is crucial for security and oversight. Get alerted whenever an application makes an outbound connection to a hostname it hasn't contacted before.

To receive these alerts, go to the [**Services Overview**](https://app.aikido.dev/runtime/services) and click **Manage Alerts**. Find and enable the setting **"Send notifications for new outbound hostnames"**. On this same page, you can also fine-tune which specific apps trigger these alerts and choose your preferred Slack or Microsoft Teams channels.

![Configure Slack alerts by selecting apps, channel, and notification preferences for instant alerts.](/files/ef0mEHo1Qyf3Qx7L3VEY)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.aikido.dev/zen-firewall/zen-features/monitor-outbound-domains.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
