Monitoring for your endpoints and your Microsoft cloud.
DoubleCheck tests your websites, servers and certificates from the outside, reads the security and usage figures of your Microsoft 365 and Azure tenants, and alerts you the moment something needs attention.
What DoubleCheck checks
Each check turns its result into OK, warning or error, and alerts you when that changes. Open a check to see how it works and what it needs.
Microsoft 365 checks
Find unused Microsoft 365 licenses
See which Microsoft 365 licenses are paid for but not assigned to anyone, per product, and get an alert when the number of spare licenses grows.
MICROSOFT 365Monitor Microsoft 365 mailbox usage
Get an alert before a Microsoft 365 mailbox is full and stops sending and receiving mail. Every mailbox is checked against your own levels.
MICROSOFT 365Monitor Microsoft Secure Score
Watch the Microsoft Secure Score of your Microsoft 365 tenants every day and get an alert when it drops below the level you set.
Azure checks
Website and server checks
DNS A record monitoring
Get an alert when a DNS name stops resolving or suddenly points to another IP address, whether by mistake, after a migration or by a hijack.
PINGPing monitoring
Ping your servers, routers and firewalls three times per run, track packet loss and round-trip time, and get an alert when a host stops answering.
CERTIFICATE EXPIRYSSL certificate expiry monitoring
Get a warning 30 days before an SSL/TLS certificate expires, and an alert when a certificate is expired, untrusted or does not match the host name.
TCPTCP port monitoring
Check that a server port such as SMTP, RDP gateway, SFTP or a database listener accepts connections, and get an alert when it stops answering.
TLS VERSIONTLS version monitoring
Check which TLS version your servers use: OK on TLS 1.3, a warning on TLS 1.2, and an alert when only older versions or a broken handshake remain.
HTTPWebsite uptime and HTTP monitoring
Check your websites and APIs every minute from the outside: status code, expected content and response time, with alerts when something breaks.
From setup to alerts in four steps
Nothing to install. Endpoint checks run from the internet, cloud checks read your tenant with read-only access.
Add what to watch
Enter a URL or host for an endpoint check, or connect a Microsoft 365 or Azure tenant with a read-only app registration.
Set your levels
Most cloud checks come with advised warning and error levels. Change them to what fits you, and exclude mailboxes or licenses you already know about.
Choose where alerts go
Email, SMS, Slack, Microsoft Teams or Discord. Decide how many failed runs in a row it takes before you are alerted.
Follow the history
Results are kept as history, so you can see when a score dropped, a site slowed down or a mailbox started to fill up.
- OKWithin your levels
- WarningNeeds attention soon
- ErrorAct now
One place for the checks nobody has time to do by hand
Status pages tell you what a provider wants you to see. DoubleCheck measures from the outside what your users actually get, and reads the figures in your tenants that otherwise only show up when someone opens the portal.
Every check ends in the same three states, so a full mailbox, an expiring certificate and a dropping Secure Score show up side by side, for every customer or tenant you manage. That also makes it a fit for managed service providers.
Access to your tenants is read-only, and the credentials are kept in a dedicated, encrypted secrets vault under strict access policies.
What can DoubleCheck check?
Websites and APIs (HTTP status, content and response time), certificate expiry, TLS version, TCP ports, DNS A records and ping. For Microsoft 365 and Azure: Microsoft Secure Score, Azure Secure Score, mailbox usage and unused licenses. See all checks.
What access does DoubleCheck need to my Microsoft 365 or Azure tenant?
An app registration in your own tenant with read-only permissions: one Microsoft Graph permission per Microsoft 365 check, or the Reader role for Azure. DoubleCheck cannot change anything in your tenant.
How are my credentials stored?
In a dedicated, encrypted secrets vault, separate from the DoubleCheck database, with access restricted to DoubleCheck's own services under strict access policies.
How do I avoid false alarms?
Failed connections and server errors are retried within the same run, and a problem is only reported after a number of failed runs in a row that you set. You also set the warning and error levels of each cloud check yourself.
Can I try DoubleCheck for free?
Yes. New accounts start with €5 of free credit, no credit card required.
Is DoubleCheck suitable for managed service providers?
Yes. Give every customer a workspace of its own, invite customers as viewers, monitor all their Microsoft 365 tenants read-only and hand them availability reports. Enterprise customers can use DoubleCheck as white label. See DoubleCheck for service providers.
Which IP addresses do the checks come from?
From a fixed set of addresses that you can look up through the DNS name monitor.doublecheck.live. The firewall and network requirements page explains what to allow for each check.
Start monitoring today
Create an account and get €5 of free credit to add your first endpoints and tenants. No credit card required.