Back to catalog
StatusScout
StatusScout is a self-hosted alternative to Oh Dear that combines website uptime monitoring with automated security header and sensitive file detection.
Open-source alternative to — compare it against:
Overview
Hosted monitoring services ping web endpoints from external networks while billing per URL, yet they overlook internal configuration errors and security exposure. StatusScout replaces external black-box polling with a self-hosted monitoring system that checks HTTP response codes alongside SSL certificates, security headers, dangling DNS records, and exposed repository files. Running the engine on your own compute gives DevOps engineers continuous hygiene audits without recurring subscription costs.
Why StatusScout instead of Oh Dear
Oh Dear monitors website availability, SSL certificates, broken links, mixed content, and DNS records using a managed, multi-region cloud probe fleet. Its hosted infrastructure verifies downtime across multiple geographic locations before alerting engineers, filtering out transient network anomalies. In return, Oh Dear charges monthly subscription tiers scaled per monitored domain, which grows expensive when monitoring dozens of ephemeral staging sites, preview branches, and internal dashboards.
StatusScout shifts this workflow to a self-managed Docker Compose stack on your own virtual machines. Instead of paying per URL, operations teams run scheduled health scans and automated security checks directly inside their private network. This allows engineers to monitor internal staging clusters and intranet endpoints that hosted cloud probes cannot reach behind corporate firewalls. In exchange, your team operates the underlying stack, including worker queues, MongoDB storage, and scheduling processes.
What it does well
- Pairs HTTP status polling with automated audits for Content-Security-Policy, HSTS, Secure cookies, and mixed content in one pass.
- Discovers sensitive leaks by scanning domains for exposed environment files, git repositories, package lockfiles, and open API documentation.
- Audits DNS configurations including MX, SPF, DKIM, and DMARC while checking for dangling records vulnerable to subdomain takeovers.
- Runs synthetic browser interactions using headless Chromium to validate multi-step checkout and authentication sequences.
- Operates inside private networks or VPCs to monitor non-public staging endpoints without opening ingress ports.
- Alerts on failures and certificate expirations via email, SMS webhooks, and ntfy notifications.
