Help & FAQ

28 checks run on your schedule, grouped into 4 areas:

Uptime & performance: uptime, SSL certificate validity/expiry, Core Web Vitals (works automatically), and a full Lighthouse performance/accessibility/SEO audit (opt-in, heavier check).

Security & malware: blacklist/malware status (Google Safe Browsing), security response headers, cookie security (Secure/HttpOnly/SameSite), exposed sensitive files (.env, .git, backups), mixed content, Certificate Transparency Log, content defacement (sudden homepage changes), vulnerable plugin/CMS versions (public CVEs), open database/admin ports, third-party script changes (supply-chain risk), and subdomain takeover risk.

Domain & email: domain expiry (WHOIS), DMARC/SPF configuration, DNS ownership (nameserver/registrar change detection), and typosquat domain monitoring (newly-registered look-alike domains).

SEO & search: Search Console traffic and index coverage (1-click connect under Settings → Integrations), on-page SEO (title/meta/H1/alt text), structured data validation, sitemap/robots.txt monitoring, redirect chain detection, content decay tracking, broken link monitoring (opt-in), and custom keyword watch.

No. Website Guardian is zero-touch - just enter your domain. Every check is passive: we look at your site the same way a browser or a DNS resolver would, from the outside. We never log into your server, CMS, or hosting panel, and we never change anything on your site.

Every 60 minutes by default. You can change this per site in Settings (5 minutes to 24 hours) - useful if you want tighter monitoring on a business-critical site.

The homepage scan tool runs 4 quick checks (uptime, SSL, DMARC/SPF, security headers) instantly, with no signup - a one-time snapshot. Creating a free account turns that into continuous monitoring: all 28 checks, run on a schedule, with alerts when something changes - not just a single point-in-time result.

Every alert appears in the in-app Alerts center. You can also connect Telegram for instant notifications, and add any number of Slack, Discord, or generic webhook channels - each sends in parallel, so you can have alerts land in Telegram and a shared Slack channel at the same time. Configure channels under Notifications.

The alert closes itself automatically on the next check that confirms the issue is gone - you don't need to manually resolve anything, though you can still mark alerts as resolved or ignored yourself at any time.

No - each issue opens exactly one alert that stays open (and gets its "last seen" timestamp bumped) for as long as it keeps happening, instead of creating a new alert every check cycle.

Yes - Heartbeats (under a site's Settings) give you a unique ping URL to call from any cron job or scheduled task. If it doesn't check in within the expected interval (plus a grace period you set), you get alerted the same way as any other issue.

Yes - every monitored site has a public status page you can share, showing current status and a rolling uptime history, without exposing anything about your dashboard or account.

A 1-click OAuth connection (under a site's Settings → Integrations) unlocks 3 checks that need it: search traffic drop detection, index coverage monitoring, and content decay tracking (pages losing search position or clicks over time). Nothing else on the site changes, and you can disconnect at any time.

Plans are priced per number of monitored sites: Free (1 site, forever), Indie ($3/mo, 5 sites), Starter ($8/mo, 15 sites), Growth ($20/mo, 50 sites, full feature set), and Agency ($70/mo, 200 sites). Annual billing is available on every paid plan for about 17% off. See Pricing for the full comparison.

Yes, no contract. Cancelling stops future billing; your plan stays active until the end of the current billing period.

Nothing is deleted. Your newest sites (beyond the new plan's limit) are automatically paused, oldest sites stay active, and you're notified which ones. Paused sites keep their history - upgrade again or free up a slot by pausing/removing another site to reactivate them.

It can happen, most often a temporary network blip or a third-party API being briefly unavailable - which is exactly why we check on a recurring schedule rather than acting on a single failed check in isolation. If you believe an alert is wrong, mark it "Ignore" and it won't reopen for that same issue.

Yes - enable it under Account using any TOTP authenticator app (Google Authenticator, Authy, etc.). You'll also get one-time recovery codes in case you lose access to your device.

We only store what's needed to monitor your site: the domain, check results, and alert history. See our Privacy Policy for details.