--- title: All articles description: Every WatchFor article in one place — 136 guides, explainers and product updates on monitoring, reliability and performance, newest first. canonical: https://watchfor.io/blog/all --- [Blog](/blog) # All articles Every post, newest first. Search by title, summary, category or tag. 136 of 136 articles ## 2026 - [Sep 11100/100 on ora.ai: what the last six points costOn 10 September 2026 ora.ai scored watchfor.io 100/100 for agent-readiness and listed it first among the 90,000-odd domains it has scanned. We are proud of that. This is the honest version: what the last six points took, why we sit in the Community category, and what a 100 does not mean.Engineering](/blog/100-on-ora-ai) - [Sep 11The best API monitoring tools in 2026An API that returns 200 with the wrong body passes every uptime check ever written. The tools worth paying for are the ones that assert on what came back — and they split cleanly into two camps depending on whether you want checks in a repository or not.Monitoring](/blog/best-api-monitoring-tools) - [Sep 11The best cron job monitoring tools in 2026A cron job that stops running produces no error, no alert and no log line — it produces silence, which looks exactly like success. Here are the tools that notice, what each one actually measures, and how to pick between a heartbeat and full job telemetry.Monitoring](/blog/best-cron-job-monitoring-tools) - [Sep 11The best DNS monitoring tools in 2026Most tools that claim DNS monitoring resolve a name and check it answered. That catches an outage and misses everything that actually goes wrong with DNS — a record edited by the wrong person, propagation that stalled in one region, a nameserver that disagrees with its siblings.Monitoring](/blog/best-dns-monitoring-tools) - [Sep 11The best free website monitoring tools in 2026Free monitoring tiers differ far more than the monitor counts suggest. Check interval, how many people can see the alerts, and — the one almost nobody checks — which check types the free tier actually includes.Monitoring](/blog/best-free-website-monitoring-tools) - [Sep 11Pingdom alternatives in 2026, and what you lose by leavingMost people leave Pingdom over the renewal quote. Before you do, be clear about the two things it does that almost nothing on the shortlist replaces — real user monitoring and scripted transactions — and then pick the alternative that covers what you actually use.Monitoring](/blog/best-pingdom-alternatives) - [Sep 11The best SSL certificate monitoring tools in 2026Certificate expiry is the most preventable outage there is, and it still happens constantly — usually because the alert went to someone who left, or because the tool only checked the certificate the CDN presents. Here is what each tool actually checks, and what most of them miss.Monitoring](/blog/best-ssl-monitoring-tools) - [Sep 11The best status page tools in 2026A status page has one job: to be believed. Most of the decision is not features — it is whether the page is hosted away from your infrastructure, whether it updates itself, and whether anyone can post to it during an incident without a deploy.Monitoring](/blog/best-status-page-tools) - [Sep 11The best uptime monitoring tools in 2026, sorted by what you are actually afraid ofMost round-ups rank monitoring tools by feature count, which is useless — the tools are not competing for the same job. This one sorts them by the failure you are trying to catch, with prices checked on a stated date and an honest note about where each one loses.Monitoring](/blog/best-uptime-monitoring-tools) - [Sep 11Uptime Kuma vs hosted monitoring: what self-hosting actually costsUptime Kuma is free and genuinely good, and for a lot of people it is the right answer. The honest comparison is not about features — it is about two structural problems that no amount of configuration fixes, and whether either of them applies to you.Monitoring](/blog/uptime-kuma-vs-hosted-monitoring) - [Sep 11UptimeRobot alternatives in 2026, including the case for stayingUptimeRobot's free tier is the most generous in monitoring and most people should keep it. This is about the three specific reasons teams leave — no login seats on the free plan, per-seat billing once you pay, and a catalogue that stops at ten check types — and which alternative answers which.Monitoring](/blog/uptimerobot-alternatives) - [Sep 10Your CDN didn't go down. It stopped caching — and nothing told you.Every other outage announces itself. A CDN that stops caching does the opposite: the site stays up, every status code stays 200, and your uptime dashboard stays green while every single request travels to your origin. Here's why that happens, why one request from one machine can never detect it, and what we built to catch it — including the claims we refused to make.Engineering](/blog/why-your-cdn-stopped-caching) - [Sep 08Clickjacking Explained: how an invisible frame steals a clickAny website can load yours inside an invisible frame and let someone click your buttons while they think they're clicking something else. One header stops it, and almost nothing can go wrong by adding it.Security](/blog/clickjacking-explained) - [Sep 08Content Security Policy Explained: what CSP actually stopsYour site works perfectly and still runs any script it's told to, from anywhere on the internet. CSP is the list that says which ones you actually meant — here's what it prevents, and how to switch it on without breaking your own site.Security](/blog/content-security-policy-explained) - [Sep 08MIME Sniffing and nosniff: when the browser guesses what your file isBrowsers don't always believe you about what a file is — they look inside and decide for themselves. That guess is how an uploaded 'image' occasionally ends up running as code. One header ends the guessing.Security](/blog/mime-sniffing-explained) - [Sep 08Permissions-Policy Explained: switching off what your site never usesYour page can ask for the camera, the microphone and the visitor's location — and so can every script and iframe you embed, in your name. Permissions-Policy is how you say which of those your site actually needs.Security](/blog/permissions-policy-explained) - [Sep 08Referrer-Policy Explained: what every outbound link tells strangersClick a link on your site and the browser quietly tells the destination which page you came from — the full URL, including whatever is in it. Sometimes that's a reset token. One header decides how much gets sent.Security](/blog/referrer-policy-explained) - [Sep 07Built for humans and AI agents: now your assistant can investigate, not just readAn AI model can reason about your website all day. It still has no machine in Singapore — we do. WatchFor now lets an AI agent run live diagnostics (DNS, TLS, headers, ping, Core Web Vitals) from 20 locations in 7 regions, over the REST API, MCP and A2A.Monitoring](/blog/monitoring-for-humans-and-ai-agents) - [Sep 01Why we built our own SSL/TLS grade checkerFor over a decade, one free tool defined what a 'good' HTTPS setup looks like: the Qualys SSL Labs Server Test and its A+ to F grade. It's brilliant — and showing its age. Here's the short history of the SSL grade, what SSL Labs gets right, where it falls short in 2026, and why we built a faster, more modern grader of our own — including the post-quantum check SSL Labs doesn't have yet.Security](/blog/ssl-grade-checker) - [Aug 28What it actually took to make a monitoring platform agent-readyAI agents are becoming real API consumers, and scanners now grade how usable your product is for them. We spent a week taking WatchFor from a mediocre agent-readiness score to 100/100 — two MCP servers, OAuth 2.1, signed probes, a no-auth sandbox, and a pile of lessons about what agents (and their scanners) actually check. Here's all of it, including what didn't work.Engineering](/blog/what-it-took-to-make-monitoring-agent-ready) - [Aug 23Six scheduled jobs that will eventually burn you — and the exact check-in for eachBackups, certificate renewal, queue workers, ETL, cleanup jobs, billing runs — every team runs them, every team has been burned by one going silent. Recipes with the exact ping patterns: exit codes, run duration, output capture, and the grace period that fits each job.Monitoring](/blog/cron-monitoring-recipes) - [Aug 23DNS propagation is a myth: what's actually happening when your record 'takes 48 hours'Nothing propagates. DNS changes don't spread across the internet — caches expire, one resolver at a time, on a timer you set yourself. Once you see it that way, migrations stop being scary: here's the TTL playbook, the myths that refuse to die, and the checks that tell you the truth.Networking](/blog/dns-propagation-myths) - [Aug 23How to read (and write) an SLA report that isn't lyingTwo companies report 99.95% uptime. One had a flawless month; the other hid a six-hour outage behind measurement tricks. Same number. Here's where SLA reports bend the truth — planned downtime, degraded time, measurement gaps, cherry-picked windows — and what an honest report discloses.Reliability](/blog/honest-sla-reports) - [Aug 23Maintenance windows done right: stop paging yourself for planned workEvery team has planned downtime — deploys, migrations, nightly batches. Most handle it by pausing monitors or eating the false alarms. Both are wrong. Here's what a real maintenance window does: silence the noise, keep the data, and keep your SLA honest.Reliability](/blog/maintenance-windows-done-right) - [Aug 23The agentic supply chain: monitoring MCP servers you host — and the ones you only consumeEvery MCP server your agents connect to is a live dependency — like an npm package that can change under you at runtime, with no lockfile and no changelog. Here's the monitoring playbook for both sides of that relationship: the servers you run, and the third-party ones you merely trust.Monitoring](/blog/mcp-agentic-supply-chain) - [Aug 23Who changed the monitor? Why your monitoring needs an audit trailThe postmortem question that has no answer in most monitoring setups: who disabled that alert, when, and what did it look like before? Here's why an audit trail on your monitoring config is as important as one on your production data — for debugging, for teams, and for the SOC 2 auditor.Monitoring](/blog/monitoring-audit-trail) - [Aug 23On-call scheduling without a second tool: rotations, escalations and fair shift mathMost teams bolt a paging product onto their monitoring and glue them together with webhooks. Here's how full on-call management — rotation calendars, escalation chains, personal paging and compensation-ready shift totals — works when it's built into the monitor itself.Reliability](/blog/on-call-scheduling-in-watchfor) - [Aug 23Seven API monitors every SaaS should be running (with the exact assertions)Not a philosophy post — a checklist. Seven concrete API monitors, the exact assertion each one needs, and the failure it catches: the lying health endpoint, the silently expiring token, the queue that backs up on Friday night, and four more.Monitoring](/blog/seven-api-monitors-every-saas-needs) - [Aug 23The complete status page guide: from bare green dots to a page customers actually trustA status page is the most public thing your infrastructure has. This guide covers every layer of building a good one: branding and themes, components and grouping, automatic vs. manual state, third-party dependencies, maintenance announcements, visibility modes, badges and JSON — and the trust rules that make or break all of it.Monitoring](/blog/status-page-complete-guide) - [Aug 23Webhook reliability: designing deliveries that survive, and monitoring both endsWebhooks fail silently by design — the sender moves on, the receiver never knows what it missed. Here's the engineering playbook for both sides: retries and idempotency, signatures and ordering, dead letters — and the monitoring that catches a dead webhook pipeline before your data drifts.Monitoring](/blog/webhook-reliability-guide) - [Aug 09API monitoring beyond status codes: assert on the response, chart what mattersA 200 OK only proves your API answered — not that the answer was right. Here's why s … --- Canonical page: https://watchfor.io/blog/all · Site guide: https://watchfor.io/llms.txt