Defacement Monitoring
Know the moment a page stops looking like your site - before your customers, search engines or the press do.
- Pages loaded in a real browser, scripts and all
- Judged by models trained on real defacements
- Your own edits never mistaken for an attack
Trusted by teams at
Every page, and whether it still looks like you
- 1
See every page's integrity
How intact each page looks, at a glance, with the one that needs you at the top.
- 2
Know which part was hit
Title, text and description scored on their own, so you know where to look.
- 3
Act within the hour
An alert as soon as a page is flagged, and another when it's clean again.
Defacement, caught properly
An attacker who changes your pages counts on nobody looking. Mon looks, every hour, the way a visitor would.
Hear about it first
When a page looks defaced, Mon tells you straight away - and again when it's clean - wherever your team will see it.
- By email, in Slack or to your own webhook, or by SMS
- The page's integrity in every alert
- Each part's score on the monitor's page
Seen the way a visitor sees it
Each page is loaded in a real browser, so content written in by a script - a favourite hiding place for injected spam - is seen too.
- Scripts run, as in any browser
- The title, text and description all read
- Pages that won't load flagged as well
Judged, not compared
Models trained on real defacements read each part of the page and score how intact it looks - so an attack is caught however it's dressed.
- Title, text and description scored on their own
- An overall integrity for the page
- Hacker messages and injected spam alike
Your edits are yours
Because Mon doesn't compare a page with an earlier copy of itself, your own changes never look like an attack.
- Publish, redesign and rewrite freely
- No baseline to reset after every update
- Alerts that mean something
Every page that matters
Paste a list of URLs - one per line, or straight from a spreadsheet - and get a defacement monitor for each.
- Home, login, checkout and the rest
- Pages you already watch are skipped
- https:// added where it's missing
Works with the tools you already use
On Enterprise plans, connect your registrar or DNS host once and Mon imports every domain it finds, picking up new ones as you buy them. On every plan, hear about them where your team already talks.
Namecheap
Every domain registered in your Namecheap account.
Amazon Route 53
Every hosted zone in your AWS account.
Azure DNS
Every DNS zone in your Azure subscription.
Slack
Reminders and alerts posted to the channel of your choice.
Everything else your site depends on
The same account, the same alerts and the same dashboard, for every other check your site needs.
- Learn more
Website monitoring
Alerts the moment a site stops answering, from 7 locations.
- Learn more
Keyword monitoring
Alerts when a page stops showing - or starts showing - the words you choose.
- Learn more
SSL monitoring
Warnings 30, 15, 7 or 1 day before a certificate expires, on any port.
- Learn more
Domain expiration
Reminders before a domain lapses, and when its registrar changes.
- Learn more
Ping monitoring
Whether a server answers at all, and how quickly.
- Learn more
Port monitoring
Whether a port is open - or closed when it should be.
Frequently asked questions
Everything about catching a defaced page.
What is website defacement?
It's an attack that changes what a website shows: its pages replaced with an attacker's message, or spam for gambling, pills and the like slipped into the text, title or description. It hurts trust, gets sites flagged by search engines and browsers, and often goes unnoticed for days.
What is defacement monitoring?
It's a service that looks at your pages on a schedule and tells you as soon as one looks defaced, so you can take it down or restore it before customers, search engines or the press notice.
How does Mon detect defacement?
It loads each page in a real browser, scripts and all, then judges the page's title, its visible text and its meta description with models trained on real defacements. Each part gets an integrity score, and the page is flagged when any part reads like a defacement.
Will it alert me when I update my own site?
No. Mon doesn't compare the page with an earlier copy of itself - it judges whether the page looks defaced. Your new pricing, blog posts and redesigns don't set it off.
Does it see content injected by JavaScript?
Yes. Pages are loaded in a real browser, so spam or messages written into the page by a script are seen just as a visitor would see them.
Is defacement monitoring free?
It comes with every paid plan. A free account includes website, SSL, domain and other monitors, and defacement monitoring turns on with a paid plan.
How often are pages checked?
Every hour at most often, since each check loads the whole page in a browser. You can choose a longer interval for any monitor.
What if the page doesn't load at all?
Then the monitor is down, with the reason - a page that times out or errors is a problem too, defaced or not.
What should I do when a page is defaced?
Take the page down or restore it from a known good copy, then find how the attacker got in: change passwords and keys, update the site's software and plugins, and check for anything else they changed.
Can I add many pages at once?
Yes. Paste a list of URLs - one per line, or straight from a spreadsheet - and Mon adds a defacement monitor for each, skipping any you already watch.
Know the moment a page is defaced
Create your account in a minute, and turn on defacement monitoring with any paid plan.