For SaaS teams that publish an uptime number
SaaS Uptime Monitoring: Uptime Monitoring for SaaS Apps, APIs and Uptime SLAs
Your customers measure your uptime from outside your cloud, so your monitor has to as well. TrackDowntime requests your marketing site, your app login, your API and your health check route on a fixed interval, rings the on-call phone when one stops answering, and stores every incident with its start, end and measured duration for the SLA conversation that follows.
60 second checks, phone call and SMS alerts on Professional at $99 a month. Enterprise at $299 covers unlimited endpoints and keeps the incident history with no expiry.
Add an endpoint
- Check interval
- 60 seconds
- Endpoints to watch
- App login, API, health route, marketing site
- Counted as down
- Wrong status, timeout, DNS or SSL failure
- Incident record
- Start, end, duration, status code, CSV export
Paste the URL, create your account, and the first check runs right away.
What SaaS uptime monitoring is
SaaS uptime monitoring is an external service that requests the customer facing parts of a software product (the app, the login, the public API) on a fixed interval, alerts the on-call engineer when one fails, and records each outage with a timestamped start and end. The record is the part SaaS companies need most, because an uptime SLA of 99.9 percent allows only 43 minutes of downtime a month and someone will eventually ask you to prove it.
43 min
Monthly downtime a 99.9 percent SLA allows in a 30 day month
60s
Between checks, so each outage is measured to about a minute
No expiry
Incident history on Enterprise, 90 days on Professional
What a SaaS product needs from an uptime monitor
A marketing site ping tells you the least interesting thing about a SaaS product. The outages customers open tickets about happen behind the login and inside the API, and they are the ones your SLA is written against.
The app, the API and the marketing site as separate endpoints
Add the login page, an authenticated API route, your health check endpoint and the marketing homepage as four checks. Each gets its own expected status code and timeout. When the API starts returning 502 while the marketing site on a separate host stays green, the incident lands on the API, which is where your customers are feeling it.
API checks with your own headers and expected codes
Set custom request headers per endpoint, such as an API key or a bearer token for a read only monitoring account, and tell the monitor which status code is correct. A route that answers 401 by design is then not reported as down every minute, and a route that should return 200 with a valid key is reported the moment it does not.
Rechecks before a timeout pages anyone
A wrong status code opens an incident on the first check. A timeout is rechecked twice, 5 seconds apart, and a DNS timeout three times, 10 seconds apart, before anyone is alerted. That is the difference between an on-call rotation that trusts the pager and one that mutes it by the second week.
A phone call that repeats until the endpoint recovers
When a check fails, TrackDowntime sends email and SMS and places an automated phone call, then repeats at 5, 10, 15, 20 and 30 minutes and onward while the endpoint is still down. Put the primary and secondary on-call numbers in the phone field, separated by commas, and both of them ring.
Alerts that are never billed per message
Most monitoring vendors meter SMS and voice as credits or monthly allowances. A bad deploy that flaps for three hours is exactly when you want every call placed. Calls and texts are included in Professional and Enterprise with no per message charge, no balance to top up and no allowance that resets on the 1st.
An incident log that answers the SLA question
Every outage is stored with its start, its end and a measured duration, and every check keeps its status code and response time. Export it to CSV when a customer asks for their monthly availability, when finance calculates service credits, or when a security questionnaire asks how you measure uptime.
Setting up SaaS monitoring in about ten minutes
Step 1
Start with the endpoint your SLA is written against
Read your own terms of service or MSA. If it promises availability of the application, the first monitor is the login page or the app root, not the marketing homepage. If it promises API availability, the first monitor is an authenticated API route.
Step 2
Add the dependencies customers notice first
Next come the public API, a health check route that touches the database, the authentication callback if you use SSO, and the marketing site. Five to eight endpoints is typical for a single product with one region.
Step 3
Set expected codes, timeouts and headers
Give API routes the header they need and the status code they should return. Set the timeout near the point where a customer would call it broken, usually 10 to 15 seconds for app pages and lower for health routes.
Step 4
Wire the on-call numbers and keep the record
Enter every phone that should ring. After the first real incident, open it and check the timestamps against your own logs. From then on the monthly availability number comes from the monitor rather than from someone's memory of the outage.
What is a good uptime for SaaS?
For most B2B SaaS products, 99.9 percent monthly availability is the working standard, and it is the figure most commonly written into customer contracts. That allows about 43 minutes of downtime in a 30 day month. Products sold to enterprise buyers often commit to 99.95 percent, and infrastructure products such as payment or identity APIs aim at 99.99 percent.
The table below turns each percentage into the minutes you are actually allowed to be down. The numbers matter more than the nines, because they tell you how much of the budget one slow rollback consumes.
| Uptime SLA | Allowed downtime per 30 day month | Allowed downtime per year | Who usually commits to it |
|---|---|---|---|
| 99.5% | 3 hours 36 minutes | 1 day 19.8 hours | Early stage products, internal tools |
| 99.9% | 43.2 minutes | 8.76 hours | Most B2B SaaS contracts |
| 99.95% | 21.6 minutes | 4.38 hours | SaaS sold to enterprise and regulated buyers |
| 99.99% | 4.3 minutes | 52.6 minutes | Payment, identity and infrastructure APIs |
Allowed downtime is calculated as the minutes in the period multiplied by the share not covered by the SLA, so 43,200 minutes in 30 days times 0.001 gives 43.2 minutes. Most contracts exclude announced maintenance windows, which is why the maintenance notice matters as much as the monitor.
Your check interval is part of your SLA math
This is the point most SaaS teams miss when they pick a monitoring plan on price. A monitor that checks every 5 minutes can only locate the start and the end of an outage to within 5 minutes each. A single incident can be overstated or understated by several minutes, and a short outage between two checks may never be recorded at all.
Against a 99.9 percent budget of 43 minutes, that uncertainty is tolerable. Against 99.95 percent, where the whole month's budget is 21.6 minutes, a 5 minute interval means one measurement error can be a quarter of your allowance. At 99.99 percent, a 5 minute interval is longer than the entire monthly budget, so the monitor cannot tell you whether you met the SLA.
The practical rule: your check interval should be small compared with the downtime your SLA allows. 60 second checks are the sensible floor for 99.9 and 99.95 percent commitments. TrackDowntime runs 60 second checks on Professional and Enterprise and 5 minute checks on Starter, which is fine for an internal tool and not what we would recommend for a product with a written availability commitment.
Which SaaS endpoints to monitor
The common mistake is monitoring only the marketing site. It is usually hosted on a different platform from the product, it is heavily cached, and it can stay perfectly healthy through a full application outage. Here is a working set for one product in one region.
| Endpoint | What its failure means | Suggested interval | Suggested timeout |
|---|---|---|---|
| App login or app root | Customers cannot get in. Usually what the SLA covers. | 60 seconds | 10 to 15 seconds |
| Authenticated API route | Integrations and customer scripts break, often before anyone opens the UI. | 60 seconds | 10 seconds |
| Health check route that touches the database | The application is up but cannot read or write data. | 60 seconds | 5 to 10 seconds |
| SSO or OAuth callback | Enterprise customers on single sign on are locked out while password users are fine. | 60 seconds | 10 seconds |
| Marketing site and pricing page | Trials and demos stop converting, and paid traffic runs into an error. | 60 seconds | 15 seconds |
| Webhook receiver or public docs | Partners cannot deliver events or read the reference. | 5 minutes | 15 seconds |
That is six endpoints for one product, which fits Professional with room for a staging environment, a second region or a second product. Teams running several products or per customer instances usually outgrow a per endpoint plan, which is what Enterprise at $299 a month with unlimited endpoints is for.
What an external HTTP monitor catches, and what it does not
Being precise here saves you from buying the wrong tool or trusting the right one for the wrong job.
Caught reliably. A 5xx from a crashed process, a failed deploy or a database that stopped answering. A load balancer returning 502 or 503. An API route that starts returning 401 or 403 because a key rotation went wrong, as long as you set the expected code. A DNS failure after a nameserver or record change. An expired certificate on your app domain, which every customer sees as a full page browser warning. An endpoint that has become too slow to use, if the timeout sits where slow stops being acceptable.
Not caught by an HTTP check. A page that returns 200 and renders an error inside it, a broken button, a background job queue that stopped processing, or a feature that fails only for some tenants. TrackDowntime does HTTP and HTTPS checks with expected status codes, timeouts, custom headers and SSL expiry. It does not match page content, does not script a browser through a user journey, does not check from several regions at once, and does not host a public status page. If a scripted login journey or APM tracing is what you need, those are separate product categories, and they sit alongside an uptime monitor rather than replacing it.
The reason to start with an external monitor anyway is that it is the only view that matches the customer's. Internal dashboards report on the infrastructure you know about. An outside check reports on what a customer's browser or script actually receives.
Proving uptime to customers and auditors
Sooner or later a customer disputes an outage, asks for a service credit, or sends a security questionnaire that asks how availability is measured and how long the evidence is kept. The answer that holds up is an independent incident log: when each outage started, when it ended, how long it lasted, and what the endpoint returned.
TrackDowntime stores that for every endpoint. Professional keeps 90 days of history, which covers a quarterly business review. Enterprise keeps it with no expiry, which is what you want when contracts run annually and credits are calculated at renewal. Both can export the record to CSV so the number in the customer report comes from the same data you would show in a dispute.
Thirty days is not enough for this job, which is why we do not recommend Starter for a product with a written SLA. For a deeper comparison of how long each vendor keeps downtime history and what its reports contain, see the review of uptime monitoring tools for SLA reports and downtime evidence, and for how each incident is logged, the website downtime tracker.
SaaS teams that run this
B2B SaaS with a 99.9 percent SLA
Monitor the login, the API and the health route at 60 seconds, ring the on-call phone, and pull the monthly availability for each customer from the incident log rather than from a spreadsheet someone updates after the fact.
API first products
Your customers integrate against the API and never see the UI. Monitor authenticated routes with a read only key, set the codes each route should return, and treat an unexpected 401 after a key rotation as the outage it is for everyone calling it.
Small teams without a paging tool
Two or three engineers sharing on-call do not need an incident management platform to get woken up. Put every number in the phone field. Every one of them is called and texted, and the calls repeat until the endpoint recovers.
Products with SSO customers
Enterprise tenants sign in through SAML or OAuth, so a broken callback locks out your largest accounts while the password login looks fine. Watch the callback route as its own endpoint.
Multi product and per customer instances
Once you run a separate instance or subdomain per customer, the endpoint count climbs fast. Enterprise covers unlimited endpoints at $299 a month, so adding a customer does not change the monitoring bill.
Teams answering security questionnaires
When a prospect asks how you measure availability and how long you keep the evidence, the honest answer is an external monitor with a retention period you can name. That is 90 days on Professional and no expiry on Enterprise.
How SaaS teams usually watch availability, compared
Most teams run more than one of these. The table shows which view each one gives you, so you can see what is still uncovered after the first purchase.
| Approach | Sees what the customer sees | Works when your cloud is down | Gives an SLA grade record | Wakes someone at 3am |
|---|---|---|---|---|
| External HTTP monitor (TrackDowntime) | Yes, status, timeout, DNS and SSL | Yes, it runs outside your hosting | Yes, start, end and duration per incident | Phone call and SMS on Professional |
| Cloud provider health dashboard | No, provider wide incidents only | It is part of the thing that is down | No, not about your app | No |
| APM and infrastructure metrics | Partly, from inside the app | Often not, the agent goes down with it | Not built for customer facing availability | Through an alert integration |
| Synthetic browser monitoring | Yes, including broken 200 pages | Yes | Usually | Depends on the vendor |
| Customer support tickets | Yes, eventually | Yes, but late | No, and disputed | No |
Plans: Starter $29 a month for 5 endpoints at 5 minute checks with email alerts and 30 days of history. Professional $99 a month for 25 endpoints at 60 second checks with phone call and SMS alerts and 90 days of history. Enterprise $299 a month for unlimited endpoints with history that does not expire. Annual billing is roughly half the monthly rate. Alerts are never metered on any plan.
Questions SaaS teams ask before buying an uptime monitor
What is SaaS uptime?
SaaS uptime is the share of time a software product is available to its customers, usually measured monthly and expressed as a percentage. It is calculated as the minutes the service was up divided by the total minutes in the period, excluding announced maintenance if the contract says so. An external monitor measures it from outside the vendor's own infrastructure.
What is the industry standard for SaaS uptime?
99.9 percent monthly availability is the most common standard in B2B SaaS contracts, which allows about 43 minutes of downtime in a 30 day month. Vendors selling to large enterprises frequently commit to 99.95 percent, and payment, identity and infrastructure APIs often target 99.99 percent. The SLA usually defines availability of the application or API, not the marketing site.
How is SaaS uptime calculated?
Uptime is total minutes in the period minus downtime minutes, divided by total minutes, times 100. A 30 day month has 43,200 minutes, so 30 minutes of downtime gives 99.93 percent. The accuracy of the result depends on the monitor's check interval: 60 second checks locate each outage to about a minute, 5 minute checks only to about five.
How do you monitor a SaaS application?
Monitor it from outside your cloud, on the endpoints customers actually use: the app login, an authenticated API route, a health check that touches the database, the SSO callback and the marketing site. Give each its own expected status code and timeout, route alerts to the on-call phone, and keep the incident history long enough to cover your SLA reporting period.
What are the best SaaS monitoring tools?
It depends on the layer. External uptime monitors such as TrackDowntime, UptimeRobot, Pingdom and Uptime.com cover availability from the customer's side. APM tools cover performance inside the app, and synthetic browser tools script user journeys. Most SaaS teams start with an external uptime monitor because it is the only one that works when their own infrastructure is down.
Do SaaS companies need a status page?
Most do, because customers look for one during an outage and support volume drops when it exists. A status page and an uptime monitor are different tools: the monitor detects and records the outage, the status page communicates it. TrackDowntime does not host a public status page, so teams that need one pair it with a dedicated status page product.
How often should a SaaS product be checked?
Every 60 seconds for anything covered by an availability SLA. The check interval limits how precisely an outage can be measured, and at 99.95 percent the whole month's allowance is only 21.6 minutes. Five minute checks are acceptable for internal tools, staging environments and documentation sites where no written commitment depends on the number.
How much does SaaS uptime monitoring cost?
For one product with five to eight endpoints at 60 second checks, expect roughly $20 to $100 a month depending on the vendor and on whether SMS and phone alerts are metered. TrackDowntime Professional is $99 a month, or $49 a month billed annually, for 25 endpoints with phone calls and SMS included. Enterprise is $299 for unlimited endpoints.
Measure your uptime the way your customers do
Add the endpoint your SLA is written against, set a 60 second interval and the on-call numbers that should ring. The first endpoint takes about a minute, and the incident record starts building from the first check.
Keep reading
Expected status codes, timeouts, rechecks before alerting and authenticated API checks.
Server down alertA phone call and SMS to every on-call number when a server, API or health route stops answering.
Website downtime trackerEvery outage logged with its start, end and measured duration, kept per plan.
Uptime monitoring for SLA reportsWhich tools keep downtime history long enough to settle an SLA dispute.
Uptime.com pricingUptime.com tiers per check count, the monthly SMS and call allowance, and add-on costs.
Plans and pricingEndpoints, check intervals, alert channels and how long each plan keeps the history.