MonitoringHeuristic2 checks
Audit Logging & Monitoring Scanner
Verify that security events are properly logged and monitored in your application.
How this scan works
- True server-side audit logging can't be verified from outside — this reports observable proxies only
- Fingerprints APM/error-tracking scripts (Sentry, Datadog RUM, LogRocket, New Relic) shipped client-side
- Informational: presence suggests some monitoring exists, absence doesn't prove none does
