Controls
Logging and incident response
Error and anomaly alerting
In placeVerified 16 September 2026ST4S L2
What this control means
Production errors reach the founder through Sentry; outages are detected by external uptime checks every three minutes from four regions and pushed to the founder's phone.
What we found
Uptime monitors on the app, the API, the website and this site, checked every three minutes from Australia, Asia, the US and Europe, with push and email alerts. Sentry captures application errors.
How we verified it
- Found the existing API monitor had been paused since July and had logged outages nobody was alerted to; unpaused and tuned it.
- Added monitors for the app sign-in page, the website and the trust centre, with a 60-second confirmation window to avoid deploy-time noise.
- Turned on push notifications to the founder's phone.
Still to do
- Connect the incidents Slack channel.
- Add usage-cap and AI-provider alerts to the same place.
Evidence (private, draft only): kuraplan-st4s-evidence/05-monitoring/2026-09-16-status-page-and-monitoring.md
Questions about this control: security@kuraplan.com