Wide Watch is in private beta. SSL + Uptime are live. New monitors landing monthly. ·

Sign in Join waitlist

3 live · 7 shipping · 10 on roadmap

One platform. Every angle of your
attack surface.

20 monitors across four categories. SSL and Uptime ship today; the rest land on a published cadence. Every monitor is included on every Wide Watch plan — see pricing.

Category 01

External Attack Surface

What attackers see first. Watch what's exposed, alert before drift becomes an incident.

2 live · 4 shipping

Cert expiry, chain validation, TLS version audit, issuer change detection, SAN drift.

HTTP, ICMP, TCP, and DNS checks from distributed probe nodes with 60s granularity.

Registrar renewal + WHOIS/RDAP change tracking. 180/90/60/30/7-day alerts. Auto-renew status.

A/AAAA/MX/TXT/CNAME drift. DNSSEC validation. Multi-resolver consensus. Nameserver health.

Port & Service Scanner

Detect exposed services: RDP, SMB, admin panels, leaked databases. Banner-grab + CVE enrichment.

Asset Discovery

Automated discovery of subdomains, cert-transparency logs, and forgotten services. Continuous recon.

Category 02

Marketing Toolkit

Tools the marketing team owns end-to-end. Trackable links, scannable codes, deliverable email, healthy sender reputation.

1 live · 3 shipping

Email Deliverability

SPF / DKIM / DMARC alignment. DMARC aggregate ingestion. Inbox placement across major providers.

Blacklist Monitor

18 major DNSBLs (Spamhaus, Barracuda, SORBS, URIBL…). Listing events + delisting helpers.

Trackable, re-targetable QR codes with scan analytics, custom branding, and dynamic destinations.

Branded short links on your domain with click analytics, UTM presets, and team-shared link libraries.

Category 03

MSP Operations

Keep your clients' infrastructure running. Sleep soundly knowing the last backup completed and the patch landed.

5 planned

Veeam, Acronis, Datto, Altaro, Synology. Was last night's backup green? Know before the client asks.

Patch Compliance

OS + application patch status across managed endpoints. CVE exposure window tracking.

Endpoint Health

Disk space, RAM pressure, critical services up/down, antivirus signature currency.

Syslog / Windows Event / cloud log ingestion. Pattern alerts. No SIEM scope — just what MSPs need.

AWS / Azure / GCP misconfig detection. S3 public buckets, IAM risks, exposed keys. Basics, not CSPM depth.

Category 04

Security Intelligence

Find risks before they're exploited. CISO-grade signals without a six-figure platform contract.

5 planned

Credential Leak

Your domain's credentials in breach corpuses (HaveIBeenPwned, SpyCloud). Alert on new exposure.

Subdomain Takeover

Orphaned DNS records pointing at deallocated cloud resources. Before an attacker claims them.

Cert Transparency

Watch CT logs for unauthorized certs issued against your domain. Catch shadow IT + phishing early.

Content + JS drift detection. Catch defacement, injected trackers, and skimmers within minutes.

Threat Intel Feed

Curated IOCs from partners + open sources, correlated against your surface. No noise.

Don't see what you need?

Tell us what to build next.

We prioritise the roadmap based on what design partners actually ask for. Reply to the waitlist confirmation email with your wishlist.

Join the waitlist Email us