--- title: Blog description: Practical guides on monitoring, reliability, and performance — plus product news and lessons from the WatchFor team. canonical: https://watchfor.io/blog --- # What we watch for Practical guides on monitoring, reliability, and performance — plus product news and lessons from keeping our own systems online. [All](/blog)[Monitoring](/blog/category/monitoring)[Networking](/blog/category/networking)[Performance](/blog/category/performance)[Security](/blog/category/security)[Reliability](/blog/category/reliability)[Email](/blog/category/email)[DevOps](/blog/category/devops)[Engineering](/blog/category/engineering) [All articles](/blog/all) 136 article s · page 1 of 7 [EngineeringSep 10, 2026 ## Your CDN didn't go down. It stopped caching — and nothing told you. Every other outage announces itself. A CDN that stops caching does the opposite: the site stays up, every status code stays 200, and your uptime dashboard stays green while every single request travels to your origin. Here's why that happens, why one request from one machine can never detect it, and what we built to catch it — including the claims we refused to make.WatchFor Team10 min read](/blog/why-your-cdn-stopped-caching)[EngineeringAug 28, 2026 ## What it actually took to make a monitoring platform agent-ready AI agents are becoming real API consumers, and scanners now grade how usable your product is for them. We spent a week taking WatchFor from a mediocre agent-readiness score to 100/100 — two MCP servers, OAuth 2.1, signed probes, a no-auth sandbox, and a pile of lessons about what agents (and their scanners) actually check. Here's all of it, including what didn't work.WatchFor Team7 min read](/blog/what-it-took-to-make-monitoring-agent-ready)[EngineeringAug 06, 2026 ## Scheduling 25 million checks with one Go binary — and no next_run_at column Most schedulers store the next run time in a database and fight write amplification forever. Ours stores no per-run scheduling state at all: every job's schedule is a pure function, recomputable anywhere. Here's the design — a 256-shard time wheel, an append-only change log — and the honest numbers from load-testing it to 25 million active jobs.WatchFor Team6 min read](/blog/scheduling-25-million-checks-one-go-binary)[MonitoringSep 07, 2026 ## Built for humans and AI agents: now your assistant can investigate, not just read An AI model can reason about your website all day. It still has no machine in Singapore — we do. WatchFor now lets an AI agent run live diagnostics (DNS, TLS, headers, ping, Core Web Vitals) from 20 locations in 7 regions, over the REST API, MCP and A2A.WatchFor Team10 min read](/blog/monitoring-for-humans-and-ai-agents)[SecuritySep 01, 2026 ## Why we built our own SSL/TLS grade checker For over a decade, one free tool defined what a 'good' HTTPS setup looks like: the Qualys SSL Labs Server Test and its A+ to F grade. It's brilliant — and showing its age. Here's the short history of the SSL grade, what SSL Labs gets right, where it falls short in 2026, and why we built a faster, more modern grader of our own — including the post-quantum check SSL Labs doesn't have yet.WatchFor Team5 min read](/blog/ssl-grade-checker)[EngineeringSep 11, 2026 ## 100/100 on ora.ai: what the last six points cost On 10 September 2026 ora.ai scored watchfor.io 100/100 for agent-readiness and listed it first among the 90,000-odd domains it has scanned. We are proud of that. This is the honest version: what the last six points took, why we sit in the Community category, and what a 100 does not mean.WatchFor Team4 min read](/blog/100-on-ora-ai)[MonitoringSep 11, 2026 ## The best API monitoring tools in 2026 An API that returns 200 with the wrong body passes every uptime check ever written. The tools worth paying for are the ones that assert on what came back — and they split cleanly into two camps depending on whether you want checks in a repository or not.WatchFor Team4 min read](/blog/best-api-monitoring-tools)[MonitoringSep 11, 2026 ## The best cron job monitoring tools in 2026 A cron job that stops running produces no error, no alert and no log line — it produces silence, which looks exactly like success. Here are the tools that notice, what each one actually measures, and how to pick between a heartbeat and full job telemetry.WatchFor Team5 min read](/blog/best-cron-job-monitoring-tools)[MonitoringSep 11, 2026 ## The best DNS monitoring tools in 2026 Most tools that claim DNS monitoring resolve a name and check it answered. That catches an outage and misses everything that actually goes wrong with DNS — a record edited by the wrong person, propagation that stalled in one region, a nameserver that disagrees with its siblings.WatchFor Team4 min read](/blog/best-dns-monitoring-tools)[MonitoringSep 11, 2026 ## The best free website monitoring tools in 2026 Free monitoring tiers differ far more than the monitor counts suggest. Check interval, how many people can see the alerts, and — the one almost nobody checks — which check types the free tier actually includes.WatchFor Team4 min read](/blog/best-free-website-monitoring-tools)[MonitoringSep 11, 2026 ## Pingdom alternatives in 2026, and what you lose by leaving Most people leave Pingdom over the renewal quote. Before you do, be clear about the two things it does that almost nothing on the shortlist replaces — real user monitoring and scripted transactions — and then pick the alternative that covers what you actually use.WatchFor Team4 min read](/blog/best-pingdom-alternatives)[MonitoringSep 11, 2026 ## The best SSL certificate monitoring tools in 2026 Certificate expiry is the most preventable outage there is, and it still happens constantly — usually because the alert went to someone who left, or because the tool only checked the certificate the CDN presents. Here is what each tool actually checks, and what most of them miss.WatchFor Team4 min read](/blog/best-ssl-monitoring-tools)[MonitoringSep 11, 2026 ## The best status page tools in 2026 A status page has one job: to be believed. Most of the decision is not features — it is whether the page is hosted away from your infrastructure, whether it updates itself, and whether anyone can post to it during an incident without a deploy.WatchFor Team4 min read](/blog/best-status-page-tools)[MonitoringSep 11, 2026 ## The best uptime monitoring tools in 2026, sorted by what you are actually afraid of Most round-ups rank monitoring tools by feature count, which is useless — the tools are not competing for the same job. This one sorts them by the failure you are trying to catch, with prices checked on a stated date and an honest note about where each one loses.WatchFor Team6 min read](/blog/best-uptime-monitoring-tools)[MonitoringSep 11, 2026 ## Uptime Kuma vs hosted monitoring: what self-hosting actually costs Uptime Kuma is free and genuinely good, and for a lot of people it is the right answer. The honest comparison is not about features — it is about two structural problems that no amount of configuration fixes, and whether either of them applies to you.WatchFor Team4 min read](/blog/uptime-kuma-vs-hosted-monitoring)[MonitoringSep 11, 2026 ## UptimeRobot alternatives in 2026, including the case for staying UptimeRobot's free tier is the most generous in monitoring and most people should keep it. This is about the three specific reasons teams leave — no login seats on the free plan, per-seat billing once you pay, and a catalogue that stops at ten check types — and which alternative answers which.WatchFor Team6 min read](/blog/uptimerobot-alternatives)[SecuritySep 08, 2026 ## Clickjacking Explained: how an invisible frame steals a click Any website can load yours inside an invisible frame and let someone click your buttons while they think they're clicking something else. One header stops it, and almost nothing can go wrong by adding it.WatchFor Team4 min read](/blog/clickjacking-explained)[SecuritySep 08, 2026 ## Content Security Policy Explained: what CSP actually stops Your site works perfectly and still runs any script it's told to, from anywhere on the internet. CSP is the list that says which ones you actually meant — here's what it prevents, and how to switch it on without breaking your own site.WatchFor Team6 min read](/blog/content-security-policy-explained)[SecuritySep 08, 2026 ## MIME Sniffing and nosniff: when the browser guesses what your file is Browsers don't always believe you about what a file is — they look inside and decide for themselves. That guess is how an uploaded 'image' occasionally ends up running as code. One header ends the guessing.WatchFor Team4 min read](/blog/mime-sniffing-explained)[SecuritySep 08, 2026 ## Permissions-Policy Explained: switching off what your site never uses Your page can ask for the camera, the microphone and the visitor's location — and so can every script and iframe you embed, in your name. Permissions-Policy is how you say which of those your site actually needs.WatchFor Team4 min read](/blog/permissions-policy-explained) --- Canonical page: https://watchfor.io/blog · Site guide: https://watchfor.io/llms.txt