What Silent Failure watches

Six kinds of signal from every host, and one rule across all of them: missing data is a finding.

Hosts and containers

Online, offline, never seen, and in maintenance. The fourth has no colour, because it is not a verdict.

Tick the containers that should be running. One that stops being there raises an alert; one you never ticked does not.

Hourly aggregates keep a year of history with min, average and peak — because the average alone hides the quarter of an hour a disk was full.

A host whose clock has drifted produces logs and certificates that cannot be lined up with anything else.

Approve what is listening now. A new port, or the same port on a new bind address, is then a change you get told about.

Matched from the OSV advisories against what is actually installed, with the distribution’s own triage and the CVSS score side by side.

Container images are scanned with Trivy, including secrets baked into layers. We store where the secret is, never the secret.

The matched line plus the lines around it, because a stack trace without its neighbours is just the word “fatal”.

Accepted, failed, and invalid users over the last day, per host.

HTTP, TCP, ping and DNS from outside your infrastructure, with certificate expiry and the TLS version actually negotiated.

One host is free, and the install takes a single command.