The quiet failures that take prod down.
up99 builds self-hosted monitoring for the things that fail silently — expiring certificates and unreachable services. Two products, one control plane, entirely on your own network.
Two watchers for the two silent killers.
Certificates expire on a clock nobody checks. Services fail where outside monitors can't reach. up99 ships a focused, open-source product for each — and one control plane that shows both.
certwatchcertificates
TLS/SSL certificate lifecycle management. Discover, score, monitor and renew every certificate before it takes a service down.
- Discovery, 0–100 health scoring, drift & diff detection
- CT-log intelligence, policy compliance, blast-radius graph
- CSR lifecycle & multi-tier expiry escalation
servicewatchuptime monitoring
Synthetic uptime monitoring from inside your network. Watch every service — HTTP, TCP, ping, DNS and heartbeat — and reach the right person before users notice.
- HTTP · TCP · ping · DNS · heartbeat checks with per-stage timings & TLS telemetry
- Incidents, SLOs & error budgets, RUM and public status pages
- On-call paging by SMS/voice, plus Telegram, Slack, Teams, webhook & email
Two products, one look and feel.
The actual operator UI — captured live from both products on a self-hosted deployment. No mockups.
certwatch — certificate command center
Fleet health score, 90-day expiry horizon and live certificate KPIs. View certwatch →
servicewatch — synthetic monitoring
Services watched live with uptime, per-stage latency and TLS telemetry. View servicewatch →
Uptime target
The quiet failures sovereign monitoring is built to protect.
To first deploy
One Docker Compose stack, from pull to running.
Bytes egress
Nothing phones home — zero outbound dependencies.
Open-source products
certwatch and servicewatch, both Apache-2.0.
Both products sit on the same foundation.
Every up99 product shares the control plane, the operator-grade UI, and the parts every regulated estate needs.
AI-assisted insights
Anomaly detection, predictions and natural-language Q&A — bring your own LLM or run the heuristics.
Multi-channel alerts
Email, Slack, Teams, Telegram & webhook, with severity routing and escalation.
Auth & tenancy
Local, LDAP and OIDC SSO; RBAC, API tokens, audit log, multi-org.
Command Center UI
One operator-grade interface across products — built for long shifts.
Built for regulated estates
Monitoring that never leaves your walls.
Hosted monitors see only the public internet, from someone else's cloud. up99 runs where your infrastructure runs — and the data stays there.
No egress, no SaaS
Nothing phones home. Deploy fully offline, with zero outbound dependencies.
On-prem & air-gap
One Docker Compose stack — on a VM or a bare appliance, fully on your hardware.
Built for regulated
Compliance-ready by design — government, finance, and the GCC.
“The certs and services you can't afford to lose sight of — watched on hardware you control.”
Questions, answered.
Bring your monitoring inside the perimeter.
Two open-source products, one self-hosted control plane. certwatch for certificates, servicewatch for services and domains.