VIGLAR

Frequently Asked Questions

Everything you need to know about website monitoring, security checks, alerts, plans and your data.

Getting started

What is Viglar?
Viglar is a website health and security monitoring service. It checks your websites for uptime, SSL, DNS, email authentication, security headers, open ports, domain changes, IP reputation and other issues, and alerts you when something needs attention.
Who is Viglar for?
Viglar is built for website owners, developers, freelancers and small web agencies that want more than basic uptime monitoring. It is designed for people who want to know what changed, why it matters and when something needs to be fixed.
How do I add a website?
Add your domain from the Viglar dashboard and verify that you control it. Verification can be completed using a DNS TXT record or an HTML verification file. Once verified, the security and monitoring checks can be enabled.
Why do I need to verify domain ownership?
Some Viglar checks require active interaction with your domain or its infrastructure. Ownership verification helps prevent abuse and ensures that these checks are only performed for websites you are authorized to monitor.
How often does Viglar scan my website?
The scan frequency depends on your plan and the type of check. Viglar runs scheduled checks automatically and records the results so changes and issues can be detected over time.
Can I pause monitoring?
Yes. You can pause monitoring for a domain when you do not want scheduled checks or alerts for a period of time. You can resume monitoring whenever you are ready.

Monitoring & security

What does Viglar monitor?
Depending on your plan, Viglar can monitor uptime, SSL certificates, DNS records, SPF, DKIM and DMARC, HTTP security headers, open ports, domain registration information, IP reputation and website content changes.
What does the DNS check include?
Viglar checks common DNS records including A, AAAA, MX, NS and TXT records, as well as SPF, DKIM and DMARC-related records. Changes can be detected when previous results are available.
What are SPF, DKIM and DMARC?
SPF, DKIM and DMARC are email authentication technologies. They help domain owners control which systems can send email using their domain and reduce spoofing and phishing risks. Viglar checks these records and explains detected configuration problems.
What does SSL monitoring check?
Viglar checks whether your HTTPS certificate is valid, trusted and approaching expiration. It can alert you before a certificate becomes a problem.
What are security headers?
HTTP security headers tell browsers how they should handle content and connections from your website. Viglar checks commonly used headers and highlights missing or potentially weak configurations.
What does port monitoring do?
Port monitoring checks publicly reachable TCP services on your verified domain or IP address. It helps identify services that are exposed to the internet and may require review.
What is IP reputation monitoring?
Viglar checks your IP address against several public reputation and blocklist sources. If an IP appears on a relevant list, Viglar reports the source so you can investigate the issue.
How does content monitoring work?
Viglar keeps recent snapshots of monitored website content and compares them with later scans. Significant changes can indicate a deployment, unauthorized modification or another event that deserves attention.
Does Viglar scan my website for malware?
Viglar can check monitored website content and accessible files for suspicious patterns and unexpected changes. It is a monitoring and detection tool, not a replacement for a full endpoint or server malware scanner.
What are DMARC Reports, and how do they help me?
DMARC Reports help you understand which mail servers send email on behalf of your domain and whether those messages pass email authentication checks. Viglar DMARC Reports collect and help you review aggregate DMARC reports, making it easier to identify legitimate sending sources and potential authentication issues. You need to publish a DMARC DNS record with reporting enabled to receive these reports.
Why is my Viglar badge not displaying?

If your Viglar badge does not appear, your website's Content Security Policy (CSP) may be blocking images loaded from https://viglar.com.

Apache: If you configure CSP in Apache, find your existing Header always set Content-Security-Policy directive and add https://viglar.com to its img-src directive.

For example, a minimal policy could look like this:

Header always set Content-Security-Policy "default-src 'self'; img-src 'self' data: https://viglar.com; object-src 'none';"

This is only an example, not a complete replacement for your existing security policy. Keep your other CSP directives and existing image sources, and add https://viglar.com to the existing img-src directive.

If CSP is configured elsewhere, such as in a hosting control panel, CDN, or application, update it there instead. Avoid adding a second CSP header: multiple policies are enforced together and may still block the badge.

If the badge still does not display, check your browser's developer console for CSP errors.

Alerts & folders

Which notification channels are supported?
Viglar supports email, Telegram, Slack, Discord and webhooks, depending on your plan. Notification destinations can be configured from the dashboard.
Can I use different notification channels for different websites?
Yes. Viglar supports folder-based alert routing, so different groups of websites can use different notification destinations. This is useful when monitoring multiple projects or clients.
What are folders?
Folders let you organize monitored domains into groups such as clients, projects or environments. They can also be used to control how alerts are routed.
Can a folder have multiple alert destinations?
Yes. A folder can have multiple notification destinations, including different channels and configurations. This lets you route the same type of incident to the people or systems that need to receive it.
What happens when an issue is resolved?
Viglar records the issue history so you can see when a problem was detected and when it stopped being detected. Depending on the alert configuration, recovery notifications can also be used.
What are maintenance windows?
Maintenance windows let you schedule planned downtime so Viglar can suppress notifications covered by maintenance-window handling during that period. Monitoring and event recording continue, so you can still review what happened. If an issue persists after the window ends, Viglar may notify you according to its alert-handling logic.

Plans & billing

What is included in the Free plan?
The Free plan lets you monitor one domain with core checks such as uptime, SSL and DNS monitoring. It is intended to let you try Viglar without a subscription.
What is the difference between Starter and Pro?
Starter and Pro provide higher domain limits and access to additional monitoring, alerting and organization capabilities. See the pricing page for the current limits and included features.
Can I change or cancel my plan?
Yes. You can change your subscription through the account billing options. If you have an active paid subscription, cancellation is handled through the Stripe customer portal.
Is there an annual discount?
Yes. Annual billing is available at a discounted price compared with paying monthly. See the pricing page for the current prices.

Privacy & data

What data does Viglar store?
Viglar stores the information required to provide monitoring, alerts, account management and billing. This includes scan results and related monitoring data. See the Privacy Policy for details.
How long is monitoring history retained?
Monitoring results and alerts are retained for a limited period rather than indefinitely. Current retention periods are described in the Privacy Policy and may vary by data type.
Does Viglar use Google Analytics or advertising trackers?
No. Viglar does not use Google Analytics or third-party advertising trackers. Website analytics are handled using a self-hosted analytics system. More information is available in the Privacy Policy.
What happens when I delete my account?
Account deletion removes your account and associated data according to the deletion and retention rules described in the Privacy Policy. If you have an active paid subscription, it must be cancelled before the account can be deleted.
What is Viglar Events?
Viglar Events keeps a historical record of detected monitoring incidents, recoveries, and relevant changes. It helps you understand what happened to a monitored domain and follow issues over time.
How is Viglar Events different from incident evidence?
Viglar Events records the history of monitoring events. Incident evidence is stored separately to support the investigation of detected issues. They serve different purposes and may have different retention periods.
How long is event history retained?
Resolved incidents and their related event records are retained for up to 180 days after resolution. Open incidents are retained until they are resolved. Standalone change events are retained for up to 180 days from detection. Incident evidence is retained for 90 days.