The Monitoring Checklist for SMBs
Everything a small business should be monitoring — domains, SSL, uptime, and email — without enterprise complexity.
You don't need a dedicated DevOps team to monitor your infrastructure. But you do need to monitor your infrastructure.
Here's the practical checklist — what to watch, why it matters, and how often to check.
Domain Monitoring
Your domain is your identity. Lose it, and you lose everything built on top of it.
Expiry dates
Know when every domain expires. Not just your main one — the marketing microsites, the old product domains, the ones registered "just in case."
Auto-renewal status
Verify auto-renewal is actually enabled, not just assumed. Check the payment method is current.
WHOIS accuracy
Outdated contact info means you won't receive critical notices. Some registries suspend domains with invalid WHOIS data.
Nameserver changes
Unexpected NS record changes could mean your domain was hijacked. You want to know immediately.
SSL Certificate Monitoring
An expired SSL certificate breaks your site for every visitor and tanks your SEO.
Expiry dates
Even with auto-renewal, certificates fail to renew. DNS validation breaks. Rate limits hit. Monitor the actual certificate, not just the renewal setting.
Certificate chain
Intermediate certificates expire too. Your cert might be valid, but if the chain is broken, browsers show warnings.
Coverage
Does your cert cover www and non-www? All your subdomains? That API endpoint?
Uptime Monitoring
Your site is down. Are you finding out from a customer, or from your monitoring tool?
HTTP status
Is the site returning 200? A server returning 500 errors is technically "up" but completely broken.
Response time
A site that takes 30 seconds to load is effectively down. Track response time, not just availability.
Global coverage
Your site might be up in your region but down in Europe. Check from multiple locations.
Critical paths
Homepage up doesn't mean checkout works. Monitor the pages that matter to your business.
Email Deliverability
Your emails are your communication lifeline — support, invoices, password resets, marketing.
SPF record
Lists who can send email as you. One misconfiguration and your emails hit spam.
DKIM signing
Cryptographic proof your emails are legitimate. Each sending service needs its own DKIM setup.
DMARC policy
Tells receiving servers how to handle failed authentication. Also sends you reports on who's sending as you.
Blacklist status
IP or domain on a blacklist? Your emails are going nowhere. Check regularly.
Start with what hurts most
You don't need to monitor everything on day one. Start with the thing that would hurt most if it failed. For most businesses: domain expiry and SSL certificates.
The "Set It and Forget It" Trap
The whole point of monitoring is that you shouldn't have to think about it. But "set and forget" requires setup:
- Alerts go somewhere actionable. Not a dead inbox. Not a Slack channel everyone mutes.
- Someone is responsible. If everyone assumes someone else is handling it, nobody is.
- Thresholds make sense. Alert on 5 minutes of downtime, not 5 seconds. Reduce noise or you'll ignore everything.
Monitor everything in one place
The Infrastructure Suite covers domains, SSL, and uptime. The Email Suite handles SPF, DKIM, and DMARC. Or get everything with the bundle.
See All Tools