Skip to main content
Start free

The CompleteStatus Blog

Monitoring & security, explained

Practical, no-fluff guides on uptime and security monitoring — fixing security headers, email authentication, SSL certificates, and consolidating your monitoring stack.

RSS feed
freshping migration

Freshping Is Gone: Where to Migrate, and How

Freshping shut down in March 2026. A practical migration checklist, and the gaps worth closing while you rebuild your monitoring.

4 min read cors security-headers

CORS Explained: The Mental Model and the Misconfigurations That Get Exploited

CORS protects users, not your server. The right mental model, the dangerous patterns (origin reflection, wildcard with credentials) and correct configs.

6 min read uptimerobot alternatives

UptimeRobot Alternatives in 2026: When the Free Tier Isn't Enough

UptimeRobot's free tier is generous, but its May 2026 ToS bans white-labeling and resale. Alternatives for teams that outgrow it.

6 min read ssl tls

SSL Certificate Monitoring: Never Get Caught by an Expired Cert Again

Expired TLS certificates are a common self-inflicted outage. Why auto-renewal isn't enough, what to monitor, and how to get warned weeks before expiry.

5 min read api-monitoring monitoring

API Monitoring Beyond Ping: Assertions, Latency Budgets and Auth

A 200 OK doesn't mean your API works. Status-code and JSONPath assertions, latency percentiles, authenticated checks and third-party dependencies.

6 min read domains dns

Domain Expiry: The Outage Nobody Monitors

How domains lapse, what recovery costs at each stage from grace period to auction, and how expiry monitoring catches it early.

6 min read cookies session-security

Cookie Security: Secure, HttpOnly, SameSite and the __Host- Prefix Explained

What Secure, HttpOnly and SameSite actually do, the Lax/Strict/None trade-offs and CSRF implications, the __Host- prefix, and Laravel/PHP/Express examples.

6 min read cron heartbeat-monitoring

Silent Cron Job Failures: Why You Need Heartbeat Monitoring

Cron jobs fail silently, with exit codes nobody reads and mail nobody receives. How heartbeat monitoring catches dead jobs, hung jobs and rebooted servers.

6 min read email-security spf

The SPF 10-DNS-Lookup Limit: Why Your Email Authentication Silently Fails

The SPF 10-DNS-lookup limit silently breaks email authentication with permerror. How includes stack up, how to count lookups, and the fixes that work.

6 min read pingdom alternatives

The Best Pingdom Alternatives in 2026, Compared

Pingdom Professional costs $249/month for 250 monitors as of May 2026. Six alternatives, what each does well, and who should pick which.

6 min read security-headers clickjacking

Preventing Clickjacking: X-Frame-Options vs CSP frame-ancestors

How clickjacking works, step by step, and how to stop it with X-Frame-Options and CSP frame-ancestors, with nginx, Apache and Caddy configs.

5 min read incidents communication

Incident Communication Templates You Can Copy-Paste at 3 A.M.

Copy-paste incident updates for every stage (investigating, identified, monitoring, resolved), plus the tone rules that keep customer trust.

5 min read

Browse by topic

Monitor your site — free

Uptime, SSL, DNS, security-header grades and SPF/DKIM/DMARC — one dashboard, one bill. The free tier includes the security layer and allows commercial use.

Start monitoring free Try the free tools