ScoutSentinelScoutSentinel
Menu

Product

Journey assurance from the outside, with the evidence to prove it

ScoutSentinel continuously exercises the journeys your customers depend on, from controlled external locations, and explains failures with the failure boundary, what still works, confidence and coverage.

Journeys and Watches

The primary object is the capability, not the script

A Journey is something a customer does: get a quote, buy online, sign in, submit a claim. Its status is derived from the Watches beneath it, and each Watch is your intent and policy for what must be true.

  • Plain language in, deterministic plan out. The composer discovers entry points and proposes steps, assertions, schedule and locations. You approve before anything runs.
  • Cheapest sufficient probe. HTTP, DNS and API checks when they prove the assertion; a browser only when rendering or interaction is required.
  • Versioned and reviewable. Every edit is a new Watch version. Healing is off by default: review verified suggestions, or let an administrator enable verified automatic locator repairs.
Journeys · Production
  • Buy online

    web, api

    no Events
  • Get a quote

    web, api

    no Events
  • Contact support

    web, voice

    1 open
  • Submit a claim

    web

    1 open
  • Partner API

    api

    no Events

Outcome state and behaviour state are shown separately, always with icon and label.

Evidence

Evidence before interpretation

Every conclusion links to the artefacts that support it. Objects are written and SHA-256 hashed before their metadata row is committed, downloads go through short-lived tokens with an audit row, and when bulky objects expire the hash remains. A signed, independently timestamped evidence ledger, verifiable offline, is being introduced before the pilot.

  • Screenshots

    At the end of every browser step and at points you choose.

  • HAR archives

    Every request and response header and timing for the run.

  • Response bodies

    The failing response, with known secret values redacted.

  • DOM and response diffs

    Before and after comparison for behaviour change.

  • Traces

    One probe run is one trace from scheduler to notification.

  • DNS and TLS snapshots

    Records, chains and issuers as observed from each location.

Secrets never reach evidence: test credentials are envelope-encrypted, decrypted only inside the execution step and scrubbed from screenshots, HAR, logs and prompts.

Events

One Event, not fifteen alerts

Correlation groups related Observations, changes and assets, and opens an Event only when your materiality policy is met: by default two consecutive failing runs from two locations.

Failure boundary
The first step and request where the failure begins, with the status observed.
What still works
The steps and neighbouring journeys that pass, so you know the blast radius.
Confidence
Derived from agreeing locations, consecutive runs and consistency, with the reasons listed.
Coverage
What was tested, from where, with which probes, and what was not.

Unknown is a first-class state. A probe that could not run (runner error, capacity, bot protection) never opens a critical Event on its own and never counts as your outage.

Event lifecycle

  1. 1Observation. A probe run records what was seen from one runner: outcome, metrics, evidence, runner identity. Append-only.
  2. 2Assertion. Deterministic rules decide pass, fail or unknown. Results carry the evaluator version.
  3. 3Correlation. Related observations are grouped; the materiality policy decides whether an Event opens.
  4. 4Event. Open, acknowledged, resolved or dismissed, with a chronology of observations, changes and actions.
  5. 5Notification. Slack, PagerDuty, email or a signed webhook, each carrying the boundary and evidence links.
See a full example Event

Change intelligence

Outcome and behaviour are separate signals

A journey can remain achievable while becoming materially different. ScoutSentinel keeps a behaviour fingerprint for each step and reports drift as a Changed state, not a failure, so product operations get a review queue and on-call gets quiet nights.

  • Release annotations

    Connect GitHub and every deployment becomes a marker. "A frontend deployment preceded checkout failures by nine minutes" is a sentence on the Event, not a Slack archaeology exercise.

  • Repairs under your control

    Healing is off by default. Review suggested repairs, or let an administrator enable verified automatic locator repairs for eligible single-browser checks. Success criteria, entered values, destinations and phone scripts stay protected. Changes remain versioned and auditable.

  • Semantic materiality with provenance

    A model may annotate whether a drift looks material and why. The annotation carries its provenance and never decides an outcome.

  • Exposure in the same feed

    New certificates, subdomains and origins reachable without the expected edge appear as Events connected to the Journey they may affect.

Locations

Independent vantage points, honestly described

Geography, cloud region and access network answer different questions. Each Watch has a location policy and every Observation records the exact runner that produced it.

ClassUsePromiseAvailability
Cloudflare edgeBroad global availability and low-cost routine probesFast outside-in signal; the network is Cloudflare, not a consumer ISPAll plans
Regional runnerRepeatable Playwright execution in a named cloud and regionDeterministic region comparison with pinned browser and runner versions; stable egress IPsTeam add-on, Business, Enterprise
Private probeInternal, branch or private-service reachabilityYour location and network, outbound-only, no inbound management portEnterprise
Specialist partnerCarrier, mobile or residential realismCoverage we would rather not fake with cloud runnersOn request

Read more in runner locations and the synthetic traffic policy.

Integrations

Events land where your team already works

Every notification carries the failure boundary and links to the evidence. Webhooks are HMAC-SHA256 signed and timestamped with a replay window; deliveries are retried and logged.

  • Slack

    Events with failure boundary and evidence thumbnails in a channel of your choice.

  • PagerDuty

    Open and resolve incidents from Events that meet your materiality policy.

  • GitHub

    Deployment markers correlate releases with journey changes.

  • Webhooks

    HMAC-SHA256 signed, timestamped, retried with backoff. Delivery log in the app.

  • Email

    Event summaries with the evidence behind the conclusion.

  • Twilio Coming soon

    Voice probes place real calls and evaluate IVR outcomes.

See webhooks and signatures for payloads and verification.

Start with one important business service

Name the service your customers and regulator care about most. We set up the first journey with you, you approve every check, and the first evidence arrives within minutes.