Monitor: catch leaks after every deploy
AI builders can re-introduce a leaked key or drop a security header on any deploy. Monitor re-runs Unspill's passive checks after every deploy and every week, and emails you only when something gets worse.
Opening soon. No payment is taken now; joining the waitlist is free and doesn't commit you to anything. Prices are planned launch prices in USD.
Sale Launch sale: 20% off through Nov 30, 2026. Payments aren't open yet; join the waitlist before Nov 30, 2026 and the sale price applies to you.
$19 $15 per month · planned · 20% off through Nov 30, 2026
For a single live app.
- 1 app (one production URL)
$49 $39 per month · planned · 20% off through Nov 30, 2026
For people shipping several apps.
- Up to 5 apps (one production URL each)
Every Monitor plan includes
- Automatic re-scan after every deploy via a Vercel or Netlify deploy hook, plus a weekly scheduled scan
- Email alert when something new appears: a leaked secret key, a Supabase service_role key, an exposed .env or .git, public source maps
- Alerts when security headers regress, for example a deploy that drops your Content-Security-Policy or HSTS
- Grade history so you can see whether each deploy made things better or worse
- The same passive, read-only checks as the free scan: we never query your database, and secrets are masked in every alert
How it works
- Join the waitlist below (choose Monitoring).
- When it opens, add your app's URL and prove you own it (a DNS record or a file on your site).
- Optionally connect a deploy hook so a scan runs after every deploy.
- You get an email only when something changes for the worse.
Not sure what you need? Run the free scan first. It's passive, needs no signup, and never touches your database. Need issues fixed now? See the Fix Service.
FAQ
What is the launch sale?
20% off the planned prices through Nov 30, 2026. Payments aren't open yet, so nothing is charged now; the sale price applies to anyone who joins the waitlist before Nov 30, 2026, and we'll confirm it in writing before charging anything.
Is monitoring available now?
Not yet. It's opening soon. No payment is taken now; join the waitlist for first access.
Does monitoring touch my database?
No. It uses the same passive, read-only checks as the free scan. It doesn't log in and never queries your database.
Why verify ownership?
So nobody can use Unspill to repeatedly scan an app they don't own.