Free website security check — then we tell you the moment it goes down.

Paste a URL and check your website's security in seconds — SSL, security headers, DNS, exposed files. No signup. Then let us keep watching: uptime checks every 60 seconds from three regions, and a plain-English email when something breaks.

free · no signup · results in seconds

Your app went down at 3:47 AM. You found out at 9:15 — from a customer.

You were asleep, or deep in a prompt shipping the next feature. Meanwhile a deploy quietly took the site down and every visitor hit a blank page for five and a half hours. We can't stop the outage. But when your website is down, you should be the first to know — not the last.

Uptime monitoring, without the false alarms.

Website monitoring built for small sites and side projects: paste a URL and we check it every 60 seconds from three regions. You only hear from us when a real outage is confirmed — in a plain-English email, not a stack trace.

Paste your URL

Drop in your app's address. We start watching in seconds — no DNS changes, no code.

GET https://yourapp.com/

We watch from 3 regions

Every 60 seconds from iad, ams and sin. One flaky region never pages you — we alert only when 2 of 3 agree.

interval: 60s · confirm: 2-of-3

You get a plain-language email

No stack trace soup. A human-written sentence on what broke — and a button to paste the fix into your AI tool.

to: you · subject: yourapp.com is down

A real outage, caught and confirmed.

The primary region flags it, the other two confirm, and the plain-language email hits your inbox — all in about 90 seconds, before you'd have noticed. This is the whole product, on a loop.

LIVE MONITOR

poll · 60s

yourapp.com

operationalchecking…DOWN · confirmedrecovered · 4m 12s

200 · 143ms— · no response

confirming from 3 regions · 2-of-3 rule

iad

ams

sin

yourapp.com is down — confirmed from 3 regions

cause: connection refused on :443 — likely the server process stopped.

What we check: uptime, SSL, dependencies — down to your cron jobs.

Level 1 is a full security check of what's publicly visible — zero setup. The deeper levels are opt-in, per app: connect them when you want more than uptime monitoring.

level 01 · zero install

Watching from the outside

The moment you paste a URL we start probing like a visitor would. No code, no agent, nothing to deploy.

uptime · every 60s from 3 regions
SSL certificate expiry
domain & DNS health
security headers

setup: paste a URL · ~60 seconds

level 02 · connect your repo

Watching your code

A read-only GitHub App scans what you actually ship — and auto-detects your stack so the advice fits it.

known CVEs in your dependencies
secrets committed by accident
stack detection → tailored fixes

setup: 1 click · read-only GitHub App

level 03 · inside the app

Watching from the inside

A three-line snippet reports what only your app can see — so you know your nightly cron actually ran and your Stripe webhooks actually arrived.

database health
Stripe webhook monitoring
cron job heartbeat monitoring

setup: 3-line snippet · Node & Python

every level is included in every plan — even free. depth is your choice, never an upsell.

Uptime and security monitoring — everything a solo founder needs.

Confirmed from 3 regions

The 2-of-3 rule kills false alarms. One region hiccups, you keep sleeping.

Security & dependency scans

Exposed secrets, risky headers and outdated packages flagged before someone else finds them.

SSL certificate expiry monitoring

We check your SSL expiration date continuously and warn you weeks before the certificate or domain lapses — not a 500 on launch day.

Incident timeline

Every outage, with duration and recovery, kept tidy — so you can see patterns, not chaos.

Alerts a human wrote

Plain sentences, not codes. “Your database refused connections” beats “ECONNREFUSED 500”.

finding · 09 jul, 03:48

Your server stopped accepting connections on port 443.

Likely the app process crashed after the last deploy.
Fix: check the start command & env vars, then redeploy.

Every feature, on every plan. Including free.

Free uptime and security monitoring for one app, forever. You only pay for more apps and more frequent scans — no feature is held hostage behind a bigger number.

Free

One app, every feature. See the whole product on your side project.

1 app monitored, free forever
Uptime checks every 60s from 3 regions
Weekly security & dependency scans
Repo CVE + secret scanning
In-app deep checks (DB, Stripe, cron)
Plain-English alerts + AI fix prompts

Start free

Indie

$15/mo

For the builder running a handful of live projects.

Everything in Free, plus

10 apps monitored
Daily security & dependency scans
5 on-demand rescans a day

Get Indie

Studio

$29/mo

A growing portfolio of apps and client work.

Everything in Indie, plus

30 apps monitored
10 on-demand rescans a day

Get Studio

Agency

$49/mo

Serious volume — up to 100 monitored apps.

Everything in Studio, plus

100 apps monitored
Unlimited on-demand rescans

Get Agency

Questions people actually search.

How do I check my website's security for free?

Paste your URL into the scanner at the top of this page. In about a minute you get a free website security check — SSL certificate, security headers, DNS health, exposed files — with every finding explained in plain English. No signup, no card, and we never probe beyond what any visitor could see.

How do I know if my cron job ran?

You usually don’t — cron fails silently, and you find out when the invoices didn’t send. Our answer is heartbeat monitoring: a three-line snippet pings us when your job finishes, and if the ping doesn’t arrive on schedule, you get an email. No log spelunking.

Can you keep my Supabase project from pausing, or my Render app from spinning down?

Mostly, yes. Our uptime checks request your site every 60 seconds, which is exactly the activity that keeps free-tier hosts like Render from spinning down. Supabase pauses on database inactivity, so if your app touches the database when it loads, the checks keep that active too. And if it pauses anyway, you’ll know before your users do.

How do I check when my SSL certificate expires?

Run the free scan — the report shows your certificate’s exact expiry date. Add your app and we monitor SSL expiration continuously, emailing you weeks before it lapses instead of the morning after.

Can you tell me when my Stripe webhooks fail?

Yes. Your app reports webhook receipts with a three-line snippet; if Stripe events stop arriving, you get an email. Failing webhooks are the quietest way to lose money — checkout works, and the subscriptions silently never activate.

I vibe-coded my app. How do I know it's secure?

Start with the free security check — AI coding tools ship fast but routinely skip security headers, leak env files, and pin outdated packages. Every finding comes with a ready-to-paste fix prompt, so the same tool that built your app can fix it. Connect your repo and we also scan dependencies for known CVEs and catch committed secrets.

Will I get false 'website down' alerts?

That’s the whole point of three regions. A single flaky network path never pages you — we only email when at least 2 of 3 regions agree your app is actually down. Real outage, real email. Flaky Wi-Fi in Frankfurt, silence.

What happens if your monitoring service goes down?

Fair question. Our checkers run as independent workers in each of the three regions — no shared single point. They watch each other, and a separate heartbeat watches all of them. If a whole region drops, the other two carry on and you still get alerted. We monitor the monitors.

Is the free monitoring plan really free forever?

Yes. Free is free forever for one app, with every feature — uptime checks from three regions, security scans, plain-language alerts, the lot. No card, no countdown. You upgrade only when you want to watch more apps.

we're already watching

Check your site free. Then let us watch it while you ship the next thing.

Start monitoring free

free forever for 1 app · no card required