Product
Journey assurance from the outside, with the evidence to prove it
ScoutSentinel continuously exercises the journeys your customers depend on, from controlled external locations, and explains failures with the failure boundary, what still works, confidence and coverage.
Journeys and Watches
The primary object is the capability, not the script
A Journey is something a customer does: get a quote, buy online, sign in, submit a claim. Its status is derived from the Watches beneath it, and each Watch is your intent and policy for what must be true.
- Plain language in, deterministic plan out. The composer discovers entry points and proposes steps, assertions, schedule and locations. You approve before anything runs.
- Cheapest sufficient probe. HTTP, DNS and API checks when they prove the assertion; a browser only when rendering or interaction is required.
- Versioned and reviewable. Every edit is a new Watch version. Healing is off by default: review verified suggestions, or let an administrator enable verified automatic locator repairs.
Buy online
web, api
Healthybehaviour stable · proof 2 min agono EventsGet a quote
web, api
Healthybehaviour stable · proof 3 min agono EventsContact support
web, voice
Degradedbehaviour stable · proof 4 min ago1 openSubmit a claim
web
Changedbehaviour changed · proof 1 min ago1 openPartner API
api
Unknownbehaviour unknown · proof 12 min agono Events
Outcome state and behaviour state are shown separately, always with icon and label.
Evidence
Evidence before interpretation
Every conclusion links to the artefacts that support it. Objects are written and SHA-256 hashed before their metadata row is committed, downloads go through short-lived tokens with an audit row, and when bulky objects expire the hash remains. A signed, independently timestamped evidence ledger, verifiable offline, is being introduced before the pilot.
Screenshots
At the end of every browser step and at points you choose.
HAR archives
Every request and response header and timing for the run.
Response bodies
The failing response, with known secret values redacted.
DOM and response diffs
Before and after comparison for behaviour change.
Traces
One probe run is one trace from scheduler to notification.
DNS and TLS snapshots
Records, chains and issuers as observed from each location.
Secrets never reach evidence: test credentials are envelope-encrypted, decrypted only inside the execution step and scrubbed from screenshots, HAR, logs and prompts.
Events
One Event, not fifteen alerts
Correlation groups related Observations, changes and assets, and opens an Event only when your materiality policy is met: by default two consecutive failing runs from two locations.
- Failure boundary
- The first step and request where the failure begins, with the status observed.
- What still works
- The steps and neighbouring journeys that pass, so you know the blast radius.
- Confidence
- Derived from agreeing locations, consecutive runs and consistency, with the reasons listed.
- Coverage
- What was tested, from where, with which probes, and what was not.
Unknown is a first-class state. A probe that could not run (runner error, capacity, bot protection) never opens a critical Event on its own and never counts as your outage.
Event lifecycle
- 1Observation. A probe run records what was seen from one runner: outcome, metrics, evidence, runner identity. Append-only.
- 2Assertion. Deterministic rules decide pass, fail or unknown. Results carry the evaluator version.
- 3Correlation. Related observations are grouped; the materiality policy decides whether an Event opens.
- 4Event. Open, acknowledged, resolved or dismissed, with a chronology of observations, changes and actions.
- 5Notification. Slack, PagerDuty, email or a signed webhook, each carrying the boundary and evidence links.
Change intelligence
Outcome and behaviour are separate signals
A journey can remain achievable while becoming materially different. ScoutSentinel keeps a behaviour fingerprint for each step and reports drift as a Changed state, not a failure, so product operations get a review queue and on-call gets quiet nights.
Release annotations
Connect GitHub and every deployment becomes a marker. "A frontend deployment preceded checkout failures by nine minutes" is a sentence on the Event, not a Slack archaeology exercise.
Repairs under your control
Healing is off by default. Review suggested repairs, or let an administrator enable verified automatic locator repairs for eligible single-browser checks. Success criteria, entered values, destinations and phone scripts stay protected. Changes remain versioned and auditable.
Semantic materiality with provenance
A model may annotate whether a drift looks material and why. The annotation carries its provenance and never decides an outcome.
Exposure in the same feed
New certificates, subdomains and origins reachable without the expected edge appear as Events connected to the Journey they may affect.
Locations
Independent vantage points, honestly described
Geography, cloud region and access network answer different questions. Each Watch has a location policy and every Observation records the exact runner that produced it.
| Class | Use | Promise | Availability |
|---|---|---|---|
| Cloudflare edge | Broad global availability and low-cost routine probes | Fast outside-in signal; the network is Cloudflare, not a consumer ISP | All plans |
| Regional runner | Repeatable Playwright execution in a named cloud and region | Deterministic region comparison with pinned browser and runner versions; stable egress IPs | Team add-on, Business, Enterprise |
| Private probe | Internal, branch or private-service reachability | Your location and network, outbound-only, no inbound management port | Enterprise |
| Specialist partner | Carrier, mobile or residential realism | Coverage we would rather not fake with cloud runners | On request |
Read more in runner locations and the synthetic traffic policy.
Integrations
Events land where your team already works
Every notification carries the failure boundary and links to the evidence. Webhooks are HMAC-SHA256 signed and timestamped with a replay window; deliveries are retried and logged.
Slack
Events with failure boundary and evidence thumbnails in a channel of your choice.
PagerDuty
Open and resolve incidents from Events that meet your materiality policy.
GitHub
Deployment markers correlate releases with journey changes.
Webhooks
HMAC-SHA256 signed, timestamped, retried with backoff. Delivery log in the app.
Email
Event summaries with the evidence behind the conclusion.
Twilio Coming soon
Voice probes place real calls and evaluate IVR outcomes.
See webhooks and signatures for payloads and verification.
Start with one important business service
Name the service your customers and regulator care about most. We set up the first journey with you, you approve every check, and the first evidence arrives within minutes.