Monthly uptime audit checklist showing SSL expiry review alert contact verification DNS record check and monitoring configuration review
# website monitoring

Monthly Website Uptime Audit Checklist

Setting up monitoring is the first step. Maintaining it is the ongoing work that most teams neglect. Alert contacts go stale when team members change. SSL certificates approach expiry without anyone noticing the lead time shrinking. New services get deployed without corresponding monitors. Check frequencies that made sense at launch are never reviewed.

A monthly audit takes 20–30 minutes and catches these gaps before they become incidents.


SSL Certificates

  • Review all SSL expiry dates — identify any certificates expiring within 60 days. Certificates within 30 days should be renewed immediately. See what is SSL certificate monitoring
  • Check for any SSL alerts that fired in the past month — if any certificate triggered a warning, verify the renewal was completed successfully
  • Verify certificates cover all active subdomains — new subdomains deployed since last month may not have SSL monitoring configured
  • Confirm Let's Encrypt auto-renewals completed for any sites using Let's Encrypt. See Let's Encrypt renewal failed for common failure modes to watch for

Domain Expiry

  • Check all domain expiry dates — flag any domains expiring within 90 days
  • Verify auto-renew is active on all domains and payment cards are current. See why domain auto-renew fails
  • Confirm WHOIS contact details are current — renewal reminder emails go to the registrant email; make sure that's still monitored
  • Review domain expiry monitoring coverage — are all domains you operate included in monitoring, or have new domains been added without corresponding monitors?

Alert Contacts

  • Review all notification contacts — are the phone numbers and email addresses still valid?
  • Remove contacts for team members who have left — stale contacts miss alerts
  • Add contacts for new team members who should be in the alert chain
  • Verify on-call rotation is documented and contacts are assigned to the right monitors
  • Test that alerts are actually delivering — send a test notification from your monitoring tool. See how to test your website monitoring setup

Monitor Coverage

  • List all currently monitored endpoints and compare against your actual live infrastructure
  • Identify new services, APIs, or pages deployed since last month that aren't yet monitored
  • Remove monitors for decommissioned services — stale monitors for retired endpoints generate noise
  • Verify content checks are still valid — if a page's content changed (a rebranding, a CMS update), content check strings may need updating
  • Check that monitor URLs are still correct — redirects or domain changes may mean a monitor is testing the wrong endpoint

DNS Records

  • Review DNS record change history — check your monitoring dashboard for any DNS alerts in the past month; investigate any that weren't expected
  • Verify nameservers match expected values on all monitored domains
  • Check for any new subdomains that should have monitoring added
  • Look for CNAME records pointing to decommissioned services — see how to audit your DNS records

Uptime Performance Review

  • Review uptime percentages for the past month across all monitored endpoints
  • Identify any recurring downtime patterns — specific times of day, specific days of the week, or correlation with deployments. See how to interpret uptime reports
  • Review response time trends — are any endpoints getting consistently slower? See website slow loading causes
  • Note any incidents and their root causes — track whether the same issues are recurring

Alert Quality

  • Review any false positive alerts from the past month — if alerts are firing for transient failures, consider adjusting confirmation thresholds
  • Review any missed incidents — cases where downtime was discovered by users rather than monitoring
  • Adjust check frequency for any endpoints where current frequency is too slow to detect incidents before user impact. See how to choose monitoring check frequency
  • Review alert fatigue risk — if your team is ignoring or dismissing alerts due to volume, see how to reduce alert fatigue

Scheduling the Audit

The easiest way to ensure this happens monthly is to block 30 minutes in a recurring calendar event — first Monday of each month works well. Assign ownership to a specific person; "the team" doesn't audit anything.

Domain Monitor consolidates uptime, SSL, domain, and DNS monitoring into a single dashboard, making the monthly audit quick to complete. Create a free account.


More posts

What Is a Subdomain Takeover and How to Prevent It

A subdomain takeover lets an attacker claim your subdomain by exploiting dangling DNS records. Learn how it happens, real-world examples, and how DNS monitoring detects it.

Read more
What Is Mean Time to Detect (MTTD)?

Mean time to detect (MTTD) measures how long it takes to discover an incident after it starts. Reducing MTTD is one of the highest-leverage improvements in reliability engineering.

Read more
What Is Black Box Monitoring?

Black box monitoring tests your systems from the outside, the way users experience them — without access to internal code or infrastructure. Learn how it works and when to use it.

Read more

Subscribe to our PRO plan.

Looking to monitor your website and domains? Join our platform and start today.