Everything you get, on every plan.

One agent, installed once. Everything below comes included on every plan. No feature gates, no tiers, no "contact sales for the good stuff." Pick a product to dive in.

The rota lives here, not in a spreadsheet.

Build a rotation once - daily, weekly, bi-weekly, or custom - and it keeps turning. The schedule is always visible, so nobody has to guess who is on call tonight.

Daily, weekly, bi-weekly, or custom rotations
Overrides for holidays, sickness, and swaps
A separate roster per team or service
Timezone-aware handover times
Who is on call now, visible to everyone
Off-duty means nobody pages you

roster · daily_oncall on call now: Rio

MonTueWed ThuFriSatSun

Ada

Rio

Kai

handover Fri 09:00 · Europe/London

Learn more about On-Call Rosters & Schedules

Signal, not spam - and someone always answers.

Alerts are grouped, deduplicated, and triaged by AI, then handed to an escalation policy that climbs level by level until somebody acknowledges.

Slack, Telegram, WhatsApp, SMS, email, push
A different channel per escalation level
Per-level wait times and a catch-all step
Levels can target a person, roster, or channel
Alert grouping and deduplication
AI triage: what is urgent, what can wait

disk 92% on web-1 on-call engineer no ack in 5 min escalate to backup

Learn more about Alerting & Escalation Policies

Your site, watched from the outside too.

HTTP, TCP, and DNS checks from multiple regions, with response-time tracking. SSL certificate and domain expiry monitoring so renewals never surprise you.

Checks from multiple regions worldwide
Response-time tracking and alerts
SSL certificate expiry warnings
Domain expiry and DNS monitoring
Uptime history per monitor
Alerts through the same on-call chain

Response time · last 24 h avg 218 ms

00:0006:0012:0018:00now

Learn more about Website & Uptime Monitoring

Know before your users do.

CPU, memory, disk, network, processes, and Docker containers collected every minute. Set thresholds, run custom checks, and let AI explain what an alert actually means.

CPU, memory, disk, network every minute
Process and Docker container monitoring
Custom checks in any language
Installed packages scanned for known CVEs
Thresholds with AI explanations
One agent, installed in a minute

CPU · last 24 h avg 34%

00:0006:0012:0018:00now

Learn more about Infrastructure Monitoring

No more silent failures.

Add one curl to your cron jobs and scripts. If the ping does not arrive on schedule, you get alerted - so a backup never quietly stops running for three weeks.

One curl line in any script or language
Alerted the moment a ping is missed
Grace periods for jobs that run long
Flexible schedules: minutely to weekly
History and trends per job
AI spots patterns in flaky jobs

# end of your backup script

$ curl -s https://hb.alertkick.com/ping/db-backup

Learn more about Heartbeat Monitoring

Kernel-level threat detection you can trust.

Every system call watched via eBPF and mapped to MITRE ATT&CK. AI analyses each event, so you see real intrusions - not a developer doing something weird.

Detection rules mapped to MITRE ATT&CK
SSH sessions and out-of-hours logins flagged
Rootkits, crypto miners, container escapes
File integrity monitoring with YARA scanning
AI triage on every security event
No kernel modules, no noticeable overhead

Hidden process detected on prod-db-1T1014

SSH login outside business hoursT1078

New listening port opened by unknown processT1571

Learn more about eBPF Security Monitoring

Every change attributed, authorized, verified.

SSH sessions, commands, and file changes recorded at the kernel and tied to who did them. Maintenance windows lock SSH on the host outside approved times.

Who logged in, from where, what they ran
File changes tied to process and user
SSH locked outside maintenance windows
Changed files scanned with YARA rules
Works for humans, pipelines, and AI agents
Full change history per host

14:02deploy modified /etc/nginx/nginx.confauthorized

14:02change verified: within maintenance windowverified

02:17SSH login attempt outside windowblocked

Learn more about Change Tracking & Control

Audit evidence that collects itself.

Security events map automatically to PCI DSS 4.0 and SOX controls. Evidence is gathered as it happens, and reports generate on demand - no pre-audit scramble.

PCI DSS 4.0 and SOX control mapping
Automatic evidence collection
CDE scoping with server tags
Reports generated on demand
AI summaries of your posture
Gaps visible at a glance

Events auto-tagged to controls

PCI 10.2.1 PCI 8.2 PCI 11.5 SOX ITGC evidence attached

Learn more about Compliance Monitoring

Ask your infrastructure questions.

The open-source MCP server connects AlertKick to Claude Desktop, Cursor, and other AI tools. Query servers, alerts, and security events - and act on them - in natural language.

Works with any MCP-capable AI tool
Query servers, alerts, security events
Acknowledge and resolve alerts in chat
Incident summaries on request
Open source, on GitHub
Same permissions as your account

What security events happened in the last hour?

3 events: 2 SSH logins during business hours, 1 new listening port on web-2 - flagged for review.

Learn more about MCP Server