Skip to cookie settingsSkip to content

How monitoring works

A monitor runs one check against one target on a schedule. It records every change. Monitors alert when selected assertions fail or recover.

DocsHow monitoring works

Adding a monitor

Choose a check, then enter the target, such as a domain or a URL. The form selects the check's starred assertions for you. You can change the selection before saving or later on the monitor's page.

Each monitor has its own schedule. Default scan schedule: hourly. Scans can run hourly on Pro, every 30 minutes on Team and every 15 minutes on Business.

The first scan

The first scan alerts on failing selected assertions. If your site already fails a selected assertion, you get an alert after the first scan.

Some assertions compare a scan with values you saved, such as the contacts in your security.txt. Until you save them, the monitor shows Needs a pin. Pin current values saves the values from the latest scan.

Monitor page · Example Inc.

7

Assertions

Ticked ones alert

Alert Assertion Latest scan found Result
—Passes
30 days or lessPasses
Expiry
30 days or lessPasses
30 days or lessPasses
30 days or lessFails
1.2, 1.3Passes
1.2, 1.3Passes
Let's EncryptPasses
Let's Encrypt Pinned —
api.example.comNeeds a pin

★ Assertions selected by default for new monitors.

Assertions on an example monitor. The last one waits for a pin.

Monitors

Monitors lists each monitor once, under the first matching condition. The order is Failing, Can't scan, Needs a pin, To review, Paused, Waiting for first scan and Passing.

Monitors · Example Inc.

20 hours ago example.com Agent Card Failing Skill wording changed
25 days ago api.example.com TLS Needs a pin No pinned names removed
1 day ago mcp.example.com/mcp MCP To review “Tool wording unchanged” and “No new tools” pass again
4 days ago example.com security.txt To review Contact added
— api.example.com/api/data x402 Paused
9 days ago shop.example.com Security Headers Passing
15 days ago example.com (A) DNS Passing
— example.com PQC Passing
Monitors in the example workspace.

Changes

We compare each scan with the monitor's stored reading. When something differs, the monitor records a change with the date and the values before and after.

A change that makes a selected assertion fail or pass again raises an alert. Other changes are recorded without an alert under All changes. To get alerts for those changes too, select Alert on every change on the monitor. Routine changes, such as a certificate's expiry drawing closer, still don't trigger alerts.

Monitor page · Example Inc.

When Change Last scan This scan Result
6 days ago Records changed removed 198.51.100.35 added 192.0.2.35 Logged, no alert
6 days ago

Records changed

removed 198.51.100.35 added 192.0.2.35

Logged, no alert
Fields and JSON
Records removed 198.51.100.35 added 192.0.2.35
15 days ago Records changed removed 192.0.2.35 added 198.51.100.35 Alert raised“DNS answer unchanged” fails
15 days ago

Records changed

removed 192.0.2.35 added 198.51.100.35

Alert raised“DNS answer unchanged” fails
Fields and JSON
Records removed 192.0.2.35 added 198.51.100.35
Changes on one example monitor. Only the stamped one raised an alert.

Review and Acknowledge

A change nobody has acknowledged puts its monitor under To review. Review lists those changes, newest first. Acknowledge marks them as seen and takes the monitor out of To review.

When a change breaks a value you saved and the new value is right, Pin new value saves what the scan reads now and acknowledges the change in one step. Acknowledge alone leaves the monitor under Failing until the saved value returns.

Review · Example Inc.

Review changes

security.txt check of example.com

When Change Last scan This scan Result
4 days ago Contact added — mailto:security@example.net Alert raised“No new contacts” failsTo review
4 days ago

Contact added

mailto:security@example.net

Alert raised“No new contacts” failsTo review
Fields and JSON

Contacts

mailto:security@example.netadded

Order — now 2
The Review window for an example monitor.

See Alerts and webhooks for where alerts go.