Skip to content
AppClap
StatusScout is unclaimed —
S

StatusScout

Security and uptime monitoring for developers·statusscout.dev

Visit

StatusScout is a security and uptime monitoring platform for developers that continuously checks a website's uptime, SSL certificates, security headers, DNS records, cookies, and exposed files. It alerts users the moment an issue is detected via email, SMS, or ntfy, and can run custom scheduled test flows for critical user journeys like signup or checkout. It is open source and can be self-hosted or used as a hosted cloud service.

What it's for

Monitor website uptime 24/7 and alert instantly on downtimeTrack SSL certificate expiration and alert before certificates expireScan for missing critical browser security headersDetect subdomain takeover risks and monitor SPF, DKIM, DMARC recordsFind accidentally exposed .env files, API keys, and sensitive credentialsRun scheduled custom test flows for signup, checkout, and other key user flowsDetect exposed API documentation endpoints (Swagger, OpenAPI, GraphQL)Detect mixed content and insecure cookie configurations

Features 17

  • API documentation exposure detection (Swagger, OpenAPI, GraphQL)
  • Cookie security checks (HttpOnly, Secure, SameSite)
  • Custom user-defined test flows (e.g. signup, checkout) via Playwright
  • Daily digest of open issues
  • DNS record monitoring (NS, MX, AAAA, SPF, DMARC, DKIM, CAA, DS, DNSKEY)
  • Exposed sensitive file detection (.env, API keys, config files)
  • Free public security scan without signup
  • Mixed content detection
  • On-demand full scan from dashboard
  • Page analysis (verbose error pages, missing SRI, CSRF-less forms, directory listings)
  • Per-check alert priority (critical, daily, disabled)
  • Scheduled checks at multiple intervals (5-minute quick scan, 6-hour/daily full scan)
  • Security header scanning (CSP, HSTS, X-Content-Type-Options, etc.)
  • Self-hostable architecture
  • SSL certificate expiration monitoring
  • Subdomain takeover detection
  • Uptime monitoring with alerting

At a glance

free tierfree trialopen sourceself-hostable
TypeWeb app
DeploymentHybrid
PlatformsWeb
Foragencies, freelance developers, SaaS founders

Integrations

AWS SESBird.comntfy.shPlaywright

Pricing

Base ($19/month) and Agency ($35/month) plans are billed annually; the exact yearly total charged is not shown. A fully-featured self-hosted version is free forever aside from server hosting costs.

Self-hostedFree

Deploy StatusScout to your own server; free forever.

You only pay for your own server. No restrictions on features.

Base$19/mo · billed annually

Billed annually; shown as $19/month equivalent. 14-day free trial, no credit card required.

Up to 5 websites; up to 10 custom test flows per domain.

Agency$35/mo · billed annually

Billed annually; shown as $35/month equivalent. Built for agencies managing multiple client sites. 14-day free trial, no credit card required.

Up to 20 websites; up to 20 custom test flows per domain.

Last checked 28 days ago·