Hosting and pages.

What we check

• Which provider is actually serving the site, and any change to it
• Third-party scripts embedded in your pages, and when each first appeared
• Changes to the pages you nominate, usually pricing, terms and service descriptions
• Whether the site is reachable over a secure connection and redirects correctly

Scripts are the part people underestimate

A typical business site loads between five and fifteen third-party scripts: analytics, chat widgets, booking tools, tracking pixels, embedded fonts. Most were added by different people over several years, and a fair number belong to services no longer in use.

The record notes when each first appeared, and for the ones already there on your first day, that they were there from the start. During a security review or a breach disclosure elsewhere, the question is whether you were running something on a particular date, and that is otherwise unanswerable.

Page snapshots

On every paid plan, you can nominate up to six pages per domain — usually pricing, terms and service descriptions — and a copy of what each one said is kept. When a customer says they were promised something in March, or a regulator asks what was published at the time, the copy exists. Reconstructing that after the fact is usually impossible.

What is kept is the text a person reads, not the markup around it, and a copy is stored when it differs from the one before it rather than once a day: a page that has not changed in two years is one copy and two years of dated checks confirming it, which is both smaller and exactly as answerable.

A change is reported once the same new text has been seen twice. Live pages disagree with themselves between requests — a visitor count, a rotating quote, a token rendered into the body — and reporting on first sight would mean an alert every morning about a page nobody edited. The cost is that a real edit is reported on the following check rather than immediately, dated to when it was first seen. If a page differs on every single request, we say so on the dashboard rather than going quiet about it.

What we will not send you

We do not report every trivial change, and we do not tell you a page looks suspicious. Alerts that need interpreting turn into work for you, and we would rather send fewer things you can act on than more things you have to judge.