Skip to content

WatchTower15 Knowledge Base

Everything you need to run WatchTower15 — a least-privilege server, domain and security monitoring platform. Install the agent in one line, ship and search your logs, watch your domains and certificates, and get alerted before your users notice. Built for engineers who want answers, not a sales deck.

Server agent

A single binary that never runs as root, holds only two read capabilities, reports host telemetry, and ships logs. Overview → · Install →

Tagging

Auto-tag servers from cloud, Docker and Kubernetes metadata; shape a large fleet with advanced include/exclude rules. Tagging → · Advanced →

Logs

Stream server and journald logs into a fast searchable store and explore them with filters, histograms, facets and context. Overview → · Search →

Monitoring

Outside-in checks for DNS, SSL/TLS, domain expiry and reachability, and service checks run by your own servers. Checks →

Alarms & alerting

Threshold and boolean rules with consecutive-failure escalation, delivered to email, Slack, Teams or webhooks. Alarms →

Security scanning

Certificate health, DNS anomaly detection and domain-expiry posture, turned into findings and alerts. Security scanning →

Administration

Fine-grained roles & permissions, a permanent audit trail with an Audit tab on each resource’s page, and Google / Microsoft single sign-on with DNS-verified domains. Roles → · SSO →

Reference

The vocabulary, defaults and limits behind the platform, in one place. Glossary →