Product · Monitoring
Automated scans. Persistent alerts. Zero check-ins.
Monitoring re-scans apps you've shipped weekly on Pro, and tracks every finding until you fix it. New issues show up in your inbox; old ones stay tracked across scans.
- Automated weekly monitoring scans on Pro
- Persistent alerts that survive scan-to-scan
- Email security (SPF, DMARC) + breach monitoring on Pro
- Weekly deep scan on Pro: logs in and tests authenticated access
- Included with Pro ($39/mo)
RLS removed from `bookings` table
Detected 14 hours ago
Mailchimp API key in JS bundle
Detected 2 days ago
CSP header added
Resolved yesterday
How it works
3 steps to your first result.
- 1
Add your domain
Subscribe, point us at the URL. First scan kicks off immediately.
- 2
Scheduled scans, automatic
On a weekly schedule (Pro) we re-scan and reconcile findings against the prior run.
- 3
Get pinged on new issues
New critical or high alerts hit your inbox. Resolved issues stay closed until they reappear.
What you get
Scheduled full scans
Full scan on a schedule: headers, RLS, secrets, auth, and more. Weekly on Pro.
Persistent alerts
Alerts track across scans. Mark fixed, suppress noise, reopen automatically if detected again.
Email security monitoring
Watches SPF, DKIM, DMARC records for your domain. Flags spoof-friendly configs.
Breach monitoring
Cross-checks your registered emails against Have I Been Pwned, flags new exposures.
Per-scan history
Every alert has a full detection history: when first seen, when resolved, when reopened.
One dashboard per domain
Group multiple domains under one account. Each gets its own alert feed and scan log.
Frequently asked
- What counts as a 'deep' scan here?
- Every monitoring scan runs the full 150+ check suite, with cross-scan reconciliation. On Pro, a weekly deep scan also logs into your app and tries to reach other users' data across up to 150 pages.
- What happens to old alerts when I fix something?
- Mark the alert as resolved. If the same issue reappears on a later scan, it auto-reopens with full history intact. You'll know immediately if a fix regressed.
- Can I monitor multiple domains?
- Yes. Pro covers up to 10 monitored projects, all managed from the same dashboard.
- How is this different from a one-off scan?
- A one-off is a snapshot. Monitoring is a feed. The value is the diff: knowing what changed since the last scan, before customers notice.