What Merlonix Monitors

Checks included on every plan

For each asset, Merlonix can run:

• SSL certificate — a live TLS handshake checking validity, expiry date, chain completeness, cipher strength, and protocol version.
• DNS — resolves A, AAAA, CNAME, MX, TXT, NS, CAA, SOA, and SRV records and flags drift or failures.
• Uptime (optional) — an HTTP/HTTPS probe to a URL you set, measuring response time and time-to-first-byte, with optional status-code, keyword, and redirect assertions.
• Domain expiry (optional) — RDAP lookup of registration expiry and registrar status.
• DNS blocklist (optional) — checks your resolved IPs against DNS blocklists and links delisting pages.
• Agent-Readiness (optional) — tests whether AI answer engines can crawl the page and assesses structured-data setup.
• Heartbeat (optional) — a dead-man-switch: your cron or batch job pings a Merlonix URL, and if no ping arrives within the period and grace window you set, an alert fires.
• TCP port (optional) — opens a connection to a port you choose to confirm a service is listening.

Advanced checks (Team, Agency, and Compliance plans)

• Performance / Core Web Vitals — a daily Lighthouse audit reporting the performance score, Largest Contentful Paint, Cumulative Layout Shift, and Total Blocking Time.
• Application Health — polls a JSON health endpoint (laravel-health / Oh Dear format) and alerts on failing sub-checks or stale data.
• Site Crawl — a weekly crawl for broken links, mixed content, and sitemap errors, with CSV export.
• Prompt-Injection / Hidden-Text Scan — a weekly headless render that detects text hidden from people but readable by AI agents.

On Free and Starter plans these advanced checks show an "Upgrade to enable" prompt.

How often checks run

Check frequency follows your plan — more frequent on higher tiers (for example every 5 minutes on Free/Starter and faster on Team, Agency, and Compliance). The exact interval for each asset is shown on the asset list as "Checked every N min".