Documentation

Check Types

Choose the right check for each endpoint.

HTTP Status

The HTTP Status check sends an HTTP GET request to the target URL and verifies that the response status code matches the configured expected code, which defaults to 200.

Each run records DNS, TCP, TLS, and total latency. This is the best default check for web servers and API endpoints that should return a predictable HTTP status code. The target goes down if the status code does not match or if the connection fails before a valid response is returned.

Body Contains

Body Contains starts with the same request and status validation as HTTP Status, then additionally checks that the response body contains a configured substring.

Use it to detect maintenance pages, degraded responses, or error banners that still return HTTP 200. Configure the expected text in the Body contains field. The target goes down if the substring is absent, even when the HTTP status code is otherwise correct.

Body Regex

Body Regex works like Body Contains but matches the response body with a Go RE2 regular expression instead of a plain substring.

It is useful when you need to match dynamic values such as version strings, dates, or JSON fields. RE2 does not support lookaheads or backreferences. The target goes down if the regex does not match the response body.

TLS Validity

TLS validity checks confirm that the certificate is signed by a trusted CA, the hostname matches, and the certificate is not expired. This validation is automatically applied to all https:// targets.

The target goes down when the certificate is self-signed and TLS verification is enabled, when the certificate is expired, or when the hostname does not match the presented certificate.

Certificate Expiry

Certificate Expiry warnings monitor the certificate’s Not After date and send an alert when the remaining lifetime falls inside the configured threshold, which defaults to 14 days.

This is separate from TLS validity: a certificate can still be valid today while approaching expiry. PulseQuay sends one alert per threshold crossing in each renewal cycle so you have time to renew before the certificate actually expires.