The Monitoring Checklist for SMBs
Everything a small business should be monitoring — domains, SSL, uptime, and email — without enterprise complexity.
You don't need a dedicated DevOps team to monitor your infrastructure. But you do need to monitor your infrastructure.
Here's the practical checklist — what to watch, why it matters, and how often to check. For the broader context — sequencing, automation, vendor management, the rest of the ops stack — the complete guide to boring IT for SMBs covers the surrounding decisions this checklist fits into.
Domain Monitoring
Your domain is your identity. Lose it, and you lose everything built on top of it. If you want a free check right now, Domain Expiry Watcher will pull WHOIS data and tell you when every domain you own is up for renewal.
Expiry dates
Know when every domain expires. Not just your main one — the marketing microsites, the old product domains, the ones registered "just in case."
Auto-renewal status
Verify auto-renewal is actually enabled, not just assumed. Check the payment method is current.
WHOIS accuracy
Outdated contact info means you won't receive critical notices. Some registries suspend domains with invalid WHOIS data.
Nameserver changes
Unexpected NS record changes could mean your domain was hijacked. You want to know immediately.
SSL Certificate Monitoring
An expired SSL certificate breaks your site for every visitor and tanks your SEO. SSL Certificate Expiry checks any domain's certificate chain, intermediate validity, and expiry date in one lookup.
Expiry dates
Even with auto-renewal, certificates fail to renew. DNS validation breaks. Rate limits hit. Monitor the actual certificate, not just the renewal setting.
Certificate chain
Intermediate certificates expire too. Your cert might be valid, but if the chain is broken, browsers show warnings.
Coverage
Does your cert cover www and non-www? All your subdomains? That API endpoint?
Uptime Monitoring
Your site is down. Are you finding out from a customer, or from your monitoring tool? Website Uptime Monitor runs 1-minute HTTP checks from multiple regions, and Is That Down aggregates the public status of critical vendors so you can rule them out fast.
HTTP status
Is the site returning 200? A server returning 500 errors is technically "up" but completely broken.
Response time
A site that takes 30 seconds to load is effectively down. Track response time, not just availability.
Global coverage
Your site might be up in your region but down in Europe. Check from multiple locations.
Critical paths
Homepage up doesn't mean checkout works. Monitor the pages that matter to your business.
Email Deliverability
Your emails are your communication lifeline — support, invoices, password resets, marketing. Email Deliverability Checker audits SPF, DKIM, DMARC, BIMI, MX, and blacklist status for any domain in one pass; if you just want to troubleshoot one piece, there are focused tools for SPF, DKIM, DMARC, and blacklist status.
SPF record
Lists who can send email as you. One misconfiguration and your emails hit spam.
DKIM signing
Cryptographic proof your emails are legitimate. Each sending service needs its own DKIM setup.
DMARC policy
Tells receiving servers how to handle failed authentication. Also sends you reports on who's sending as you.
Blacklist status
IP or domain on a blacklist? Your emails are going nowhere. Check regularly.
Start with what hurts most
You don't need to monitor everything on day one. Start with the thing that would hurt most if it failed. For most businesses: domain expiry and SSL certificates — the top of the list of what breaks first when nobody's looking.
The "Set It and Forget It" Trap
The whole point of monitoring is that you shouldn't have to think about it. Set-and-forget done well isn't laziness — it's rigour: the thing runs on its own, but you've built verification and alerting around it so you find out when it silently breaks.
Which requires setup:
- Alerts go somewhere actionable. Not a dead inbox. Not a Slack channel everyone mutes — that's how alert fatigue turns monitoring into expensive wallpaper.
- Someone is responsible. If everyone assumes someone else is handling it, nobody is.
- Thresholds make sense. Alert on 5 minutes of downtime, not 5 seconds. Reduce noise or you'll ignore everything — the 3 AM alert problem is exactly this failure mode, just at the worst possible hour.
Monitor everything in one place
Site Watcher covers domains, SSL, uptime, DNS, and vendor status. Email Deliverability Checker handles SPF, DKIM, DMARC, and BIMI. Start with either — or both.
Try Site Watcher