StatusScout
Security and uptime monitoring for developers·statusscout.dev
StatusScout is a security and uptime monitoring platform for developers that continuously checks a website's uptime, SSL certificates, security headers, DNS records, cookies, and exposed files. It alerts users the moment an issue is detected via email, SMS, or ntfy, and can run custom scheduled test flows for critical user journeys like signup or checkout. It is open source and can be self-hosted or used as a hosted cloud service.
What it's for
Features 17
- API documentation exposure detection (Swagger, OpenAPI, GraphQL)
- Cookie security checks (HttpOnly, Secure, SameSite)
- Custom user-defined test flows (e.g. signup, checkout) via Playwright
- Daily digest of open issues
- DNS record monitoring (NS, MX, AAAA, SPF, DMARC, DKIM, CAA, DS, DNSKEY)
- Exposed sensitive file detection (.env, API keys, config files)
- Free public security scan without signup
- Mixed content detection
- On-demand full scan from dashboard
- Page analysis (verbose error pages, missing SRI, CSRF-less forms, directory listings)
- Per-check alert priority (critical, daily, disabled)
- Scheduled checks at multiple intervals (5-minute quick scan, 6-hour/daily full scan)
- Security header scanning (CSP, HSTS, X-Content-Type-Options, etc.)
- Self-hostable architecture
- SSL certificate expiration monitoring
- Subdomain takeover detection
- Uptime monitoring with alerting
At a glance
Integrations
Pricing
Base ($19/month) and Agency ($35/month) plans are billed annually; the exact yearly total charged is not shown. A fully-featured self-hosted version is free forever aside from server hosting costs.
Deploy StatusScout to your own server; free forever.
You only pay for your own server. No restrictions on features.
Billed annually; shown as $19/month equivalent. 14-day free trial, no credit card required.
Up to 5 websites; up to 10 custom test flows per domain.
Billed annually; shown as $35/month equivalent. Built for agencies managing multiple client sites. 14-day free trial, no credit card required.
Up to 20 websites; up to 20 custom test flows per domain.