Stack Watch
Keep your websites in view.
Scheduled audits keep an eye on the websites you care about. See version drift, published vulnerabilities and score changes in one workspace.
Sign in to start watchingWatching starts on Starter - the Free plan gives you 3 on-demand audits a month.
What you can watch
- Own site - your sites: vulnerabilities, certificates, drift, before they bite.
- Competitor - their stack moves and score changes.
What a watch does
- Re-audits on scheduleWatched sites re-audit automatically - daily on every paid plan.
- One event feedTech changes, version drift and score moves, plus new vulnerabilities, end-of-life technologies and certificate expiry - one timeline per site.
- Risk radarPro and up: known-exploited and high-severity advisories on your stack surfaced first, so the urgent items rise to the top.
What lands in the feed
One timeline per watched site, newest first. Every entry names what changed and on which audit it was seen, so a change is something you can look up rather than something you have to remember.
Alert feed
examplestore.comexampleSEP 16 09:14PHP 8.1 reached end of life - security updates stoppedRuntime - 04
SEP 16 06:02Certificate expires in 12 days - renew by 28 SepEdge - 01
SEP 14 22:41WordPress 6.2 is behind - update availableApplication - 03
SEP 14 09:07jQuery fell to 21% current - version driftPresentation - 02
SEP 13 04:30Score changed - 63 to 58, band mediumReport
One line per event in this feed - a webhook fires when the re-audit completes.
- A technology appears or disappearsA new framework, analytics tag or CDN shows up - or one you relied on is suddenly gone. On a competitor that is a decision you can read; on your own site it is often a change nobody announced.
- A version movesUp after a deployment, or quietly further behind as the library keeps releasing without you. Version drift is the slow one: nothing breaks on the day it starts.
- A new vulnerability touches the stackA published advisory that matches something the site actually runs - not a generic feed to triage yourself.
- A technology reaches end of lifeStill working, but outside its published support window. Review the detected version and plan the next upgrade.
- A certificate is running outNamed with the date, while there is still time to act.
- The score movesUp or down, with the sub-score that caused it - so a drop is a lead, not a mystery.
How many sites you can watch
Monitoring starts on Starter. Create a Free account for on-demand audits, then choose a plan for the number of websites you want to watch.
- FreeNo watched sites
- Starter1 site
- Pro10 sites
- StudioUnlimited sites
Why this isn't uptime monitoring
An uptime monitor answers one question: is the site responding? That is a good question, and this is not it. Stack Watch answers a different one - what is the site made of, and what changed since the last audit?
- A site can be up all week and still get worseIt picks up a package with a published advisory, slips a version behind, or runs a technology that stopped being maintained. Every request returns 200 the whole time.
- Change monitors read the page, we read the stackTools that watch a page for changes compare text and pixels and tell you the wording moved. We look at what runs underneath - the libraries, frameworks and versions - and tell you the foundation moved.
- Use both, for different questionsIf you need to know within a minute that a page is down, use an uptime monitor. If you need to know that the page now runs a library with a published advisory, that is this.