Your site is down.Here’s why.
When your site, API or AI endpoint breaks, WhyDown works out why. Seconds after the alert, your team gets the cause, the fix and the evidence.
Free for 20 monitors. No card needed.
- Detect
- Confirm
- Investigate
- Explain
HTTPS · checked every 30 seconds
- us-east212 msrefused
- eu-west148 msrefused
- ap-southeast264 msrefused
- First failed check, from us-east
- Confirmed: all three regions agree
- Cause and fix sent to #ops
One region failing never pages anyone.
- DNSResolves to the same address as yesterday
- CertificateValid for another 61 days
- Port 443Connection refused from all three regions
- ProvidersCloudflare reports no incidents
- Recent changesDeploy
a41f9c2by sam, 4 minutes before the first failure
Deploy a41f9c2 at 14:02 broke the API. Four minutes later every region was refused on port 443, while DNS and the certificate stayed healthy.
- Roll back
a41f9c2. - Check what the deploy changed about the port the app listens on.
Read-only: it never changes your servers. Two regions must agree before anyone is paged.
The difference
Twenty tabs, or one message.
● DOWN checkout.acme.dev
Reason: SSL handshake failed
Then the search starts.
- Server logs
- DNS records
- Certificates
- Deploy history
- Provider status pages
- Team chat
The TLS certificate for checkout.acme.dev expired at 03:12. It was issued on Jul 26 and never renewed.
Fix
- Renew the certificate now.
- Check that automatic renewal runs: the certificate for api.acme.dev was issued the same day.
Even when the answer is “it's not you.”
The investigator checks your stack and the services it depends on, and shows the check behind every claim. When the evidence doesn't point anywhere, it says it isn't sure.
A deploy at 14:02, then every region refused the connection.
Roll back a41f9c2, then check what it changed about the port the app listens on.
Vercel reports elevated errors in Washington, D.C. since 09:12.
Nothing on your side changed. Post a notice on your status page and wait it out.
Confidence medium · 3 pieces of evidencePing fails, but HTTPS, TLS and DNS are healthy.
Your firewall drops ICMP. Switch this monitor to HTTPS, or close the incident and it won't count against your uptime.
Confidence high · 5 pieces of evidenceYour product runs on models and MCP servers. Watch those too.
An open port isn't proof. WhyDown asks the model for an answer and asks the MCP server for its tools, from every region.
api.anthropic.comevery minute- Sends a one-line promptPOST /v1/messages
- Gets an answer back“OK” in 640 ms
- Tells auth, rate limits and overload apart200
Works with Anthropic and any OpenAI-compatible endpoint, including your own gateway.
mcp.acme.dev/mcpevery minute- Completes the
initializehandshake118 ms - Lists its tools14 tools
- Still offers
search_ordersfound
Catches the deploy that drops a tool your customers' agents depend on, not just the one that takes the server down.
Also monitors HTTP and JSON APIs, TLS certificates, DNS, TCP ports, ping, domain expiry and cron heartbeats.
Works with your agent
Ask your coding agent why it broke.
WhyDown has an MCP server. Claude Code, Cursor or VS Code can add monitors, read the diagnosis and pause checks for a deploy, without leaving the editor.
# Connect Claude Code
claude mcp add --transport http whydown \
https://app.whydown.dev/mcp \
--header "Authorization: Bearer wdk_…"