Skip to content
Home/FlowUptime security & form testing controls

SECURITY & CONTROL

Useful monitoring.
Clear boundaries.

Monitoring should help you look after a website. These controls define who can monitor it, what can be submitted and where sensitive actions belong.

14 days on Pro · No credit card · No plugin

Verify the website first.

Domain ownership verification uses a DNS record or verification file. Monitoring is designed for authorised websites, with controls against private and reserved network destinations. It is not a service for probing internal systems or bypassing access restrictions.

Approve the first live form submission.

A dry run finds the intended form and fields without submission. An owner or administrator must approve live testing before synthetic details can be sent. Live submission is limited to once every 24 hours per form monitor.

Use conspicuously synthetic details and a stable expected confirmation. CAPTCHA bypass, payment submissions and authenticated forms are outside this offering.

Keep account access under your control.

Enable the available two-factor authentication on your account. Team roles restrict sensitive actions, including billing and destructive operations. Keep invitations and member access under review as people join or leave your team.

Use the Stripe-hosted billing portal for payment management. Email alerts are available across plans; signed webhooks are available on Pro and Agency.

Understand the service boundary.

A successful check is evidence for its configured assertion at a point in time. It is not a security audit, a guarantee of uninterrupted uptime or proof that a downstream inbox received a message.

For a product or security question, use the contact page. Read the privacy policy and terms for the service details.

YOUR NEXT CLIENT WEBSITE

Give it a closer look.

Start with one important page. See what the checks tell you.

Start your 14-day trial ↗

No card. No plugin. Your own website.