A developer-first registrar built around a documented REST API, Terraform provider, and full-featured DNS with DNSSEC and ALIAS records. Kestrelname sells domains at or near registry cost with a flat annual account fee, and includes WHOIS privacy on every eligible TLD. There is no upsell funnel at checkout and no separate control panel for DNS.
Share your experience to help others choose the right provider.
Had a registry-side issue with a .de where the trustee service needed re-verification. Took them about 30 hours to reply, which felt long, but the person who answered clearly understood the registry rules and fixed it in one round trip instead of the usual four. I'd trade fast-and-clueless for slow-and-right, though I understand not everyone would.
Moved 34 domains here over a weekend after getting tired of surprise renewals elsewhere. The transfer tool takes a CSV of domain plus auth code and just chews through them. Three years in and every renewal has been within a few cents of what the TLD page said it would be. The membership fee pays for itself around domain twelve for me.
We manage DNS for about 200 client zones through their Terraform provider. Records apply in seconds and the state handling is sane, which I cannot say about the last two registrars we tried. Docs are complete and versioned. Only gripe is that rate limits on the bulk endpoints are lower than I'd like during large migrations, and you have to email them to get a raise.
No complaints about how they run the place. Prices are honest, 2FA with hardware keys works, privacy is free and applied automatically. But I needed a .co.za and a couple of newer gTLDs and they simply don't carry them, so I'm splitting my portfolio across two registrars which defeats part of the point. Support confirmed there's no timeline for adding more.
Tested the exit path deliberately before committing my main portfolio. Auth codes are visible in the dashboard immediately, no lock period beyond the ICANN minimum, no retention popup begging me to stay. That alone told me more than any review. Came back a month later.
Had a registry-side issue with a .de where the trustee service needed re-verification. Took them about 30 hours to reply, which felt long, but the person who answered clearly understood the registry rules and fixed it in one round trip instead of the usual four. I'd trade fast-and-clueless for slow-and-right, though I understand not everyone would.
Moved 34 domains here over a weekend after getting tired of surprise renewals elsewhere. The transfer tool takes a CSV of domain plus auth code and just chews through them. Three years in and every renewal has been within a few cents of what the TLD page said it would be. The membership fee pays for itself around domain twelve for me.
We manage DNS for about 200 client zones through their Terraform provider. Records apply in seconds and the state handling is sane, which I cannot say about the last two registrars we tried. Docs are complete and versioned. Only gripe is that rate limits on the bulk endpoints are lower than I'd like during large migrations, and you have to email them to get a raise.
No complaints about how they run the place. Prices are honest, 2FA with hardware keys works, privacy is free and applied automatically. But I needed a .co.za and a couple of newer gTLDs and they simply don't carry them, so I'm splitting my portfolio across two registrars which defeats part of the point. Support confirmed there's no timeline for adding more.
Tested the exit path deliberately before committing my main portfolio. Auth codes are visible in the dashboard immediately, no lock period beyond the ICANN minimum, no retention popup begging me to stay. That alone told me more than any review. Came back a month later.