Schedule it to watch pages for downtime, slow responses, TLS expiry and redirects, plus real content changes: text or CSS/XPath regions, prices, keywords, SEO tags, robots.txt, sitemaps and screenshots. Noise-filtered diffs, Slack/webhook/e-mail alerts.
Unreleased (prepared 2026-10-15, NOT pushed) — Private-network (SSRF) protection
Monitored URLs, sitemap URLs, robots.txt and every redirect hop are checked against private, loopback, link-local, cloud-metadata and internal addresses in every encoding (decimal/octal/hex IPv4, IPv4-mapped/NAT64/6to4 IPv6, unicode dots, single-label names); names are resolved by a DNS-pinned lookup that refuses private answers and connects to exactly the address it checked (no rebinding window).
A refused monitor produces an uncharged row (status: error, statusReason: "refused: private-network protection; not charged") and never touches the baseline; a redirect that lands on a private address is an uncharged error, not downtime.
Browser mode: Chromium sends every request (navigations, redirects, meta refresh, JS navigations, sub-resources) through a local checking proxy; blocked requests are counted in RUN_SUMMARY.privateNetworkBlocked.
Webhook and Slack URLs are validated the same way before any alert is sent; webhook redirects are never followed.
TLS probes use the same pinned lookup.
No change to pricing, output fields (two additive fields: refused count and privateNetworkBlocked in RUN_SUMMARY) or the input schema.
1.0.0 — 2026-10-11
First release.
Uptime checks: HTTP status, response time and TTFB, DNS resolution, full redirect chain, TLS expiry, issuer and trust, plus confirmation retries before a URL is reported down.
Content change detection for the whole page, a CSS selector region or an XPath region.
Normalised text with a line-based unified diff.
Built-in and custom ignore patterns, plus element exclusion. Ignore patterns apply retroactively.
Price tracking, structured list extraction (text or attribute), and keyword appear/disappear alerts.
SEO-critical changes: title, meta description, canonical, H1, lang, final URL, meta robots and X-Robots-Tag. noindex appearing is flagged as critical.
robots.txt rule changes, and sitemap URLs added or removed (indexes and .gz supported).
Browser mode (Playwright Chromium) with screenshot pixel diff, threshold, masks and diff image.
State in a named key-value store per project, with change history (last N) per monitor.
Alerts by webhook (JSON) and Slack incoming webhook, plus a per-run e-mail digest via apify/send-mail.
Pay per event: url-checked, url-checked-browser and change-alert. The run respects the max total charge, and blocked, robots-disallowed and error results are never charged.
Honest user agent and robots.txt respected by default. Bot protection is reported as blocked and never bypassed.
