The whole vital-signs panel, explained
Each check below exists because its failure mode is silent, expensive, and — once you know — easy to prevent. This is exactly what runs on your sites, shown with real output.
Add a domain
No agents, no DNS changes, nothing to install. Type the domain; that is the whole setup.
First scan in about a minute
The full panel runs immediately — uptime, SSL, SPF, DKIM, DMARC, DNS, blacklist, expiry — and lands as one health score.
Alerts only when it matters
Checks repeat on your plan's rhythm. You hear from us when something breaks, changes, or is about to expire — confirmed first, so never for a blip.
Downtime found in minutes, not by your customers
Your site is loaded from outside, the way visitors see it. On Starter that is every 5 minutes; on Pro and Agency, every minute. Response time is recorded with every check, so "the site feels slow" becomes a graph, not an argument.
- Double-confirmed alerts — a down alert is emailed only after a second check fails too. One hiccup never becomes a 3 a.m. email.
- Recovery alerts with duration — the all-clear tells you exactly how long the outage lasted.
- Incident history — every outage kept on record, with start, end and cause details.
- 30-day uptime bars on every site, so reliability is visible at a glance.
🔴 yourstore.com is DOWN
HTTP 503 · confirmed by 2 consecutive checks
Started 14:02 PKT · Still down at last check
🟢 yourstore.com recovered
Downtime lasted 11 minutes (14:02 – 14:13 PKT)
Now answering HTTP 200 in 212 ms
The certificate will not quietly expire on your watch
Certificates fail silently: an auto-renewal breaks, a migration forgets a hostname, a chain is served incomplete. We inspect the live certificate on every health scan — validity, issuer, names covered, chain — and start warning 30 days before expiry, so there is always time to fix it in office hours.
- Expiry countdown in the dashboard for every site.
- Chain and mismatch errors flagged the scan they appear in — before visitors meet a browser warning with your name on it.
- Renewal verification — after you renew, the next scan confirms the new certificate is really being served.
Warning fires automatically at 30 days left.
SPF, DKIM & DMARC — the checks nobody else bundles
This trio decides whether your invoices, receipts and newsletters land in the inbox or the spam folder — and whether criminals can send mail pretending to be you. Most uptime tools never look at it. We grade all three on every health scan and alert the moment any of them weakens.
- SPF — record validated and DNS lookups counted against the hard 10-lookup limit; cross it and receivers reject your mail outright. We warn you at 9.
- DKIM — signing keys probed across 12 common selectors (Google, Microsoft, Mandrill, Amazon SES and more).
- DMARC — policy graded from monitor-only to quarantine to reject, with aggregate reporting checked.
- Downgrade alerts — a deleted record, a weakened policy or a new sender added to SPF reaches you in the same scan, not at the next complaint.
DMARC at p=reject would grade fully operational — the panel shows you the next step, never a fake pass.
Every DNS edit, witnessed
DNS is the phone book everything else depends on — and the easiest thing to break with one tired edit. We snapshot your address, mail and nameserver records on every health scan and diff them against the last snapshot. Any change produces a before/after alert: hijack attempts, accidental deletions and registrar mistakes surface in minutes, not at the next customer complaint.
- Before/after diffs in the alert email itself — no digging through a dashboard to see what changed.
- Mail records included — an MX change that silently reroutes company email is caught the same way.
- History kept — every snapshot retained, so "when did this record change?" always has an answer.
DNS records changed for yourstore.com
− MX 10 mail.yourstore.com
+ MX 10 mail2.yourstore.com
A 203.0.113.14 (unchanged)
If this was you, no action needed. If it was not — act now.
Listed somewhere? You will know first
If your domain or mail server lands on a major blocklist, outgoing email quietly starts dying — senders are rarely told. We check the major public lists on every health scan and alert on any listing, with the delisting path for that specific list in the alert.
The one outage with no patch
An expired domain takes the website, the email and the brand in a single registrar grace-period auction. We read the registry expiry date directly and warn from 14 days out — to your monitoring inbox, not the dead mailbox the registrar has on file.
One number that answers "how is my site?"
Every scan rolls the checks into a score out of 100, weighted by what actually breaks businesses: being down and being unable to send mail cost the most. The weights are published, fixed, and the same for every customer — no moving goalposts, no grades you cannot reproduce with the free scanner.
- Trends, not snapshots — the dashboard shows the score alongside 30-day uptime, so improvement is visible.
- Points are explained — every check shows why it earned what it earned, in plain English.
Quiet by default, loud when it counts
Alerts go to your account email — or a separate alert address you set in Settings, so a monitoring email never depends on the very mail system it watches. Every incident opens a record the moment it starts and closes it on recovery; nothing is "resolved" by a human forgetting to mark it.
- Incident lifecycle — detected, confirmed, alerted, recovered, recorded. Durations are exact.
- Weekly digest every Monday — scores, uptime and every change across your sites in one email. The week in one glance, even when nothing broke.
- Separate alert address — send alerts to a teammate or a different mailbox entirely.
Your week at UptimeVitals
yourstore.com — 98/100 · uptime 100% · no incidents
blogstudio.net — 87/100 · uptime 99.98% · 1 incident (6 min, recovered)
Changes this week: 1 DNS edit · SSL renews in 41 days · DMARC unchanged