What we've shipped, and what's next
A real, honest roadmap — completed items are live in production today, in-progress items exist but aren't finished, and planned items don't have code behind them yet.
Completed
Website & infrastructure monitoring
HTTP/HTTPS, ping, TCP, DNS, SSL, and heartbeat monitor types with real check scheduling.
Agent platform
mTLS gRPC agent that installs and supervises Prometheus exporters via the Docker Engine API.
Alert rules on real Alertmanager
Threshold and anomaly alert rules routed through Alertmanager with grouping and deduplication.
Incident management
Automatic incident creation from firing alerts, assignment, and resolution tracking.
Widget-based dashboards
Drag-and-drop dashboards backed by real Prometheus/VictoriaMetrics queries, with public share links.
Real PDF/XLSX/CSV reporting
Scheduled and on-demand reports with real uptime and MTTR calculations, not templated numbers.
Webhook platform
HMAC-signed webhook delivery with retries and delivery history.
API keys & rate limiting
Organization-scoped API keys with Redis-backed fixed-window rate limiting.
Go & TypeScript SDKs
Real, published client libraries used internally by MonSPHERE itself.
Integration marketplace
Slack, Teams, Discord, Telegram, PagerDuty, Opsgenie, Webhook, and Email delivery.
Custom RBAC roles
Six system roles plus organization-composable custom roles from a 12-key permission catalog.
MFA / TOTP
Real RFC 6238 time-based one-time passcodes with single-use backup codes.
Platform Admin console
Cross-organization administration: subscriptions, licenses, usage, feature flags, and audit.
Subscriptions, billing & licensing
Enforced plan quotas, invoices, payment methods, and cloud/enterprise/offline license types.
Feature flags with deterministic rollout
Global, per-organization, and percentage-based rollout — deterministic per organization, not random per request.
Append-only audit logs
Database-enforced immutable audit trail across every organization.
Live payment gateway integration
Self-serve plan upgrades and card-on-file recurring billing through PayTR, with card tokens encrypted at rest.
Screenshot Monitoring
Scheduled visual snapshots of a page, diffed pixel-by-pixel against the previous one to catch a change nothing else picks up on.
Cookie Monitoring
Track a page's cookies for unexpected additions, removals, or security-attribute changes — Secure, HttpOnly, and SameSite, not just whether a cookie is still there.
Content Change Monitoring
Alert when a page's visible text or detected technology stack changes — a plain HTTP fetch, not a headless browser.
robots.txt & Meta Noindex Monitoring
Alert the moment a page or an entire site is accidentally deindexed — built on an HTTP monitor's existing body-content check, no new monitor type needed.
Email Authentication (SPF/DKIM/DMARC) Monitoring
Watch a domain's email authentication records for the silent misconfiguration that tanks deliverability — a DNS monitor's TXT record check.
Certificate Transparency Log Monitoring
Get notified the moment a new certificate is issued for your domain or a subdomain — catches unauthorized issuance and shadow IT early.
Third-Party Script Integrity Monitoring
Alert when a third-party script loaded on your page changes unexpectedly — an early signal of a supply-chain compromise.
Port Discovery
Full-range TCP port scan of a host you own to flag any port that's open now but wasn't before — an early warning for an accidentally-exposed service.
Sitemap & URL Monitoring
Watch a sitemap for added, removed, or broken URLs across an entire site.
Subdomain Monitoring
Continuous subdomain discovery to catch a new or forgotten subdomain before someone else finds it first.
Lighthouse / SEO Audits
Scheduled Lighthouse runs tracking Performance, Accessibility, Best Practices and SEO scores over time.
Core Web Vitals Monitoring
Track LCP, CLS, FCP, TTFB and TBT from a real browser as their own trend lines — TBT stands in for INP, which needs real user interaction to measure.
Accessibility (WCAG) Monitoring
Scheduled axe-core audits against WCAG 2.x A/AA — violated rules by impact and affected elements, alerting on a regression before it becomes a compliance complaint.
Broken Link Monitoring
Crawl an entire site for broken internal and external links, not just the URLs already listed in a sitemap.
Typosquatting & Brand Impersonation Detection
Find registered lookalikes of your domain — typos, homoglyphs, IDN homographs, other TLDs — and get alerted when a new one appears, before it's used for phishing.
In Progress
Native Kubernetes API integration
Deeper cluster-native monitoring beyond agent-based exporter monitoring — currently behind a feature flag, disabled by default.
SAML / LDAP SSO
Provider data models exist; the full SSO login flow is being built out on top of them.
Planned
Kubernetes Helm chart
A dedicated Helm chart for deploying MonSPHERE's own control plane onto Kubernetes — today's only supported path is Docker Compose.
Python, Java, and C# SDKs
Additional official client libraries beyond the current Go and TypeScript SDKs.
Jira & ServiceNow
Both are real catalog entries today, not yet wired up to live OAuth flows.
Mobile access
A dedicated mobile experience for on-call response and incident triage.
Start monitoring everything in minutes
Create a free account, add your first check and get alerted the moment something breaks — no credit card required.