Security and compliance
Encrypted credentials, signed webhooks, SSL certificate tracking and an audit log of account activity.
SSL certificate monitoring
Get an alert before a certificate expires. UptimeWarden tracks the certificates of the endpoints you monitor.
- Expiry alerts
Get alerts 30, 15, 7, and 1 day before expiration
- Chain validation
Verify the complete certificate chain end to end
- TLS configuration
TLS version checking and cipher suite analysis
- OCSP stapling
Verify OCSP stapling configuration
Security headers analysis
Get Mozilla Observatory-style security header analysis with detailed remediation guidance.
- A+ to F grades
Graded the way Mozilla Observatory grades headers
- How to fix each issue
Step-by-step instructions to fix issues
- Score history
Track improvements over time
Security checks and access controls
SOC 2-aligned controls, role-based access and audit trails for security reviews.
SSL certificate monitoring
Expiry, chain and OCSP checks
Alerts go out 30, 15, 7 and 1 day before a certificate expires.
Security headers analysis
Mozilla Observatory-style grading
HTTP security header analysis, with remediation guidance and A+ to F grading.
Roles and audit log
For security reviews
Audit trails and role-based access controls, for compliance requirements and security audits.
- SOC 2-aligned
- GDPR-aligned
- ISO 27001-aligned
Controls are aligned with SOC 2 and ISO 27001. We do not hold a SOC 2 attestation or an ISO 27001 certification yet.
AI and your data
AI analysis runs on structured, minimized data. Common personal identifiers are masked before a prompt leaves UptimeWarden; masking reduces exposure but cannot catch every value. AI requests go only to Microsoft Azure. The AI service does not store prompts or outputs, and they are not used to train models.
- • Data minimized to only what's needed for analysis
- • Pattern-based masking of common personal data, 18 patterns (emails, phone numbers, IP addresses, tokens, API keys, card numbers)
- • Audit trail aligned with SOC 2 control expectations (attestation not yet held)
Aligned with the data protection regulations that apply to you
Documented processing purposes, self-service for data-subject rights, 72-hour breach notification, and a clear controller / processor split, you stay the data controller for the alert recipients and status-page subscribers you upload; UptimeWarden processes them on your behalf. A bilingual (TR/EN) Data Processing Agreement is available at the Enterprise tier.
- JSON data export and account deletion, self-service from Settings
- Customer data stored in the EU on Microsoft Azure, with Standard Contractual Clauses for transfers outside the EU
- Common personal data masked in AI prompts (18 patterns)
- 30-day sub-processor change notice with a right to object
- Plan-based audit log retention up to 1 year, with high- and critical-severity events kept indefinitely
UptimeWarden does not currently hold SOC 2 Type II or ISO 27001 attestation. We run controls aligned with those frameworks and can share our current documentation under NDA. The bilingual DPA is offered at the Enterprise tier; for customers who require all data to remain in-country, we also scope dedicated and on-premises deployments on demand.
Add SSL and security header checks
SSL monitoring and security headers analysis are included on every plan, including Free.
Talk to us
Questions about plans, integrations or enterprise needs? Send a message, we typically reply within 1 business day.
Company details
Send us a message
Share your questions, partnership ideas, or enterprise needs.