# webwatch

> Watches your websites, alerts you only when something changes and keeps alerting even if its own server goes down.

webwatch is a website availability monitor, in the style of upptime, which MEREBA runs in production to watch its own sites. It checks each website at the frequency you assign, measures the HTTP status code, latency, the expected text and the days left before the TLS certificate expires, and alerts by Telegram, email and push notifications only when a site goes down, recovers or its certificate is about to expire. It includes a progressive web app (PWA) that installs on your phone and, if the monitor itself stops responding, detects it and probes the websites directly from the phone. Today it is a private-use tool and it is not for sale: MEREBA builds a custom version for your company, hosted and maintained by MEREBA.

- Status: In production · private use
- Version: 1.0.1
- Who it is for: Companies and professionals who depend on their websites and want to find out before their customers when one stops working.
- Technology: Python, py4web, PWA, Web Push, systemd
- Platform: Web, PWA

## Features

- Websites are added through a form, each with its own frequency (from 1 to 1440 minutes), GET or HEAD method, accepted HTTP codes, expected text, timeout and TLS validation.
- Measures the HTTP status code, latency, the presence of the expected text and the days left before the certificate expires.
- No false alarms from micro-outages: after a failure it rechecks a minute later and only declares the site down after two failures in a row.
- Alerts only on a change of state: down, recovered (with the outage duration) and certificate expiry thresholds at 14, 7, 3 and 1 days. It never repeats the same alert.
- Three alert channels: Telegram, email and push notifications on your phone.
- Dashboard with an overall traffic light; uptime over 24 hours, 7, 30 and 90 days; 90 days of daily bars and a sparkline; a page per site with a latency chart, incidents and history.
- PWA that installs on your phone and opens offline with the last known status.
- Who watches the watcher: if the monitor does not respond, the PWA detects it in about 6 seconds, alerts on the device and probes the websites directly from the phone.
- Thresholds can be changed without redeploying: failures before declaring an outage, recheck interval, slow latency, TLS warnings and history retention.
- Very lightweight: in production it runs on a Raspberry Pi and each check cycle takes about 3 seconds.

## Security

- Google-only sign-in (OpenID Connect with state, nonce and PKCE) for a closed list of accounts: there is no registration and no passwords to steal.
- SSRF protection: it does not follow redirects into the internal network when the monitored website is public, and only accepts http and https.
- The PWA does not store authenticated pages and wipes the device data on sign-out.
- Sessions can be revoked instantly (for example, if a phone is lost), strict CSP and HSTS.
- Access logs with the user pseudonymised, and the checker runs as a hardened system service.
- Push notifications implemented by hand on the standards (VAPID and aes128gcm encryption), with no new dependencies.

## Offer: Your own webwatch, tailored to you

We do not sell the application: we build a custom version of webwatch for your company, and we install and host it ourselves. Tell us which websites you want to watch and how you want to receive the alerts.

- Price: €1,000 + VAT
- Custom version of webwatch for your company.
- Installation and hosting for 2 years.
- Alerts by Telegram and by email through Mailjet (up to 200 emails a month) for 2 years.
- Free updates for 2 years.
- Optional: your own branding and logo, for an extra €250 + VAT.

## Frequently asked questions

### Can I buy or use webwatch?

No: MEREBA's instance is for private use and the application is not for sale. What we offer is to build a custom version for your company for €1,000 + VAT.

### What does the €1,000 + VAT include?

The custom version, its installation and hosting, alerts by Telegram and by email through Mailjet (up to 200 emails a month) and updates, all for 2 years. Write to us with the websites you want to watch and how you want to receive the alerts.

### Can it carry my brand?

Yes. Your own branding and logo cost an extra €250 + VAT.

### Will it flood my phone with alerts?

No. It only alerts when a site changes state: when it goes down, when it recovers and when the certificate is about to expire. A single failure does not alert: it is rechecked and the outage is declared after two failures in a row. High latency is only flagged on the dashboard.

### What if the monitor itself goes down?

Telegram and email depend on the server, but the phone PWA detects within seconds that the monitor is not responding, alerts you and checks the websites directly from the phone.

### What does it check on each website?

The HTTP status code, the response time, that an expected text appears and the days left before the TLS certificate expires, at the frequency you choose for each site.

Page on the website: https://mereba.com/en/applications/webwatch
Contact: info@mereba.com