Monitor your website for a keyword, not just uptime

TL;DR

Set up 24/7 monitoring that checks your home page every few minutes and looks for a word that's always on it, like your business name. If the site goes down, or the page loads without that word, you get an alert. We use Better Stack and check every 5 minutes.

A hacked site is still up

Most uptime monitors ask one question: does the site answer? A hacked website usually does. It can load fine while the home page has been swapped for someone else’s message, so an uptime check carries on saying everything is fine.

When a website gets hacked, two things usually happen. The site is defaced, or the customer data in it is stolen, and sometimes both.

Check for a word as well

A keyword check loads your page and looks for a word you know is always there. If the site is down, or the page comes back without that word, you get an alert. That way the monitor tells you about a defaced home page before a customer does.

How we set it up

We use Better Stack for all our clients.

1. Add a monitor for your home page address.
2. Choose the keyword check and enter a word that’s always on the page, like your business name.
3. Set it to check around the clock. We check every 5 minutes.
4. Send the alerts to someone who will act on them, by email, text or app.

Then test it once: put in a word that isn’t on the page and make sure the alert arrives.

Questions

Which word should I monitor for?

Pick something that's on the page every day and wouldn't survive a defaced home page, like your business name. You can use the copyright year in the footer too, but then you have to change the monitor every January.

How often should it check?

Every 5, 10 or 15 minutes is fine, and it's up to you. We check every 5 minutes, so we hear about a problem within minutes.

Does Better Stack cost money?

Better Stack has a free plan as well as paid ones. Check their pricing page for what's included today.

Will this tell me if customer data has been stolen?

No. A keyword check catches a site that's down or defaced. Stolen data often leaves no sign on the page, which is why it pays to keep less of it on your website.