HOSTWATCH CLOUD
Connect to your account.
Install the public server component and pair it with your gethostwatch workspace. Cloud access uses a subscription, with a 7-day trial for your first server.
Connect your first server →
FOR THE SERVERS YOU OWN
See the pressure.
Know the cause.
Control the response.
See where every service runs, inspect server health and follow HTTP evidence to its cause. Operate through your workspace, the native app or an authorized MCP assistant.
7-day trial · 1 serverNo automatic charge
YOUR SERVERS / YOUR SERVICES / YOUR CONTROL
From a request
to a measured response
01 / REQUEST02 / SERVICE03 / IMPACT04 / ACTION
YOUR SERVICES / YOUR SERVERS
Know where everything runs.
Find a service by name, domain or server. Inspect its runtime, dependencies and retained data before reviewing an operation.
Explore service operations →The same workspace and permissions follow you across web, iPhone, iPad and MCP.
PRIVATE ENTERPRISE
Run your own control plane.
The complete website and API are delivered privately under an annual installation license. No separate Hostwatch Cloud subscription is required.
Explore the private license →The Go agent is the server component in both models. Installing it does not share compute or enroll a server automatically.
THE PLATFORM
Clarity at every layer.
Keep the context from first signal to final action. Counts, retained examples and attributed protection outcomes each tell their own part of the story.
01 / OBSERVE
Observe
Connect host health, workloads, services and recorded HTTP paths. Follow a spike to the application and the evidence behind it.
Explore capability ↗
02 / DETECT
Detect
Investigate scanners, route floods and service pressure. Keep suspected behavior, verified identity and measured impact distinct.
Explore capability ↗
03 / RESPOND
Respond
Preview a scoped Nginx action. Verify the active rule, inspect its outcomes and let temporary controls expire.
Explore capability ↗Traffic stays at your origin.
Understand the connection →Go Node runs on your server. Your applications receive traffic directly or through the edge provider you choose. Hostwatch receives telemetry and coordinates permitted actions; the hosted control plane is outside the request path.
EVIDENCE / RESPONSE / LIMITS
Know what protection
can do here.
Scanners, HTTP route pressure and network floods need different responses. Explore where Hostwatch can act and where your application or upstream provider participates.
Read the full protection scope →01Internet→02Upstream→03Origin→04Application
Repeated sensitive-path probes, URL enumeration and exploit-endpoint discovery in recorded HTTP evidence.
Investigate the source and route. With the Nginx actuator configured, preview a temporary client limit or deny.
A probe is evidence of behavior. It does not prove an exploit succeeded.
Illustrated workflows. Your available evidence and actions depend on the agent, logging, application integration and enabled policy.
THE NATIVE APP
Investigate from
your iPhone.
Choose a server, review host health and request evidence, then move between traffic, service and runtime views. The app offers passkey and QR sign-in; sample screens here are labeled where fabricated data appears.
Explore the iPhone and iPad app →
SERVICES / SETUP / OPERATIONS
Know where each service belongs.
Explore service placement, observed dependencies and configured migration destinations. Review backup, verification, routing and recovery in the same workspace.
Inspect & move services
Review dependencies and a verified plan before changing servers.
Read the migration guide ↗A searchable field guide
Setup steps and current interface screenshots for the features you use.
Search all guides ↗The same controls through MCP
Locate a component, edit files or replace its source, then explicitly build, publish and apply the reviewed release.
Connect your assistant ↗HOSTWATCH CLOUD / USD
A clear price.
A clear server allowance.
One enrolled server uses one slot, including when it is offline. Services and containers on that server share its slot. Choose the fleet size you need.
Solo fits 1 server · up to 1 enrolled.
Solo
Fits your fleet$9.99 / month
$99.99 with annual billing
Start with your workspace →Team
$29.99 / month
$299.99 with annual billing
Start with your workspace →Scale
$49.99 / month
$499.99 with annual billing
Start with your workspace →USD reference prices. Purchase in the iPhone or iPad app; local prices and taxes appear before payment. A new workspace can try one server for 7 days, with no automatic charge.
Run your own control plane?
Private Enterprise is $1,490 / year for one full installation. No separate Cloud subscription is needed; capacity follows your hardware.Explore private Enterprise →
Private Enterprise is $1,490 / year for one full installation. No separate Cloud subscription is needed; capacity follows your hardware.Explore private Enterprise →
DEPLOY YOUR WAY
Your infrastructure stays yours.
Install the same Go agent on your servers. Choose Hostwatch Cloud with a workspace subscription or the privately delivered full control plane with an annual installation license.
Compare deployment options ↗FROM THE BLOG
Changes worth understanding.
News analysis and engineering notes on observability, client identity and operating services safely.
Explore the blog →
Service operationsService placement is the starting point of a trustworthy release↗
Deployment modelsCloud or Private Enterprise: choose who operates the control plane↗
Installation guideYour first server connection should end with verification↗
Source releasesPartial edits and full source replacements need different promises↗
Recovery engineeringA manual release needs a recovery story you can prove↗