I wonder why Trend publishes such upcoming advisories -- are those even helpful? For sure, I am going to be more critical of anything that ends up there.
After running uptime.is for 12+ years, I finally built a monitoring service I always wished existed. It's powered by pyng, a monitoring system that started with just using Python standard library but now uses a bit more (mostly Twisted, though). It's still all boring tech, though, and mostly usable without JavaScript.
Key features:
* Powerful DNS monitoring (traces NS/DS records from root, DNSSEC validation, DNS-based blacklists)
* HTTP checks with full control (GET/HEAD/PUT/POST, custom headers, JSON parsing, multi-location via Mullvad)
* Tor network monitoring
* Push checks (inverted monitoring for cron jobs/batch tasks)
The tech stack is boring: Python + Twisted + SQLite, boring CLI tools (ping, drill, curl, nc), no containers, no exotic dependencies. The setup runs on a mix of OpenBSD/FreeBSD/Alpine Linux.
Pricing is simple: $15/year for basic checks, $20/year for checks that notify on output changes. No account creation – configure your check, pay, and it starts running.
This is still a proof-of-concept, but it's been monitoring my own infrastructure reliably. I realise that there are probably that many potential users, but the 'net is big, so I might get some anyway.
I wonder why Trend publishes such upcoming advisories -- are those even helpful? For sure, I am going to be more critical of anything that ends up there.