Monitoring
VPN monitoringUptime monitoringIntegrationsPlatform
AI assistantsAPI and CLISecurityMore
PricingFree testerDocsBlog Log in20 channels, from Slack and PagerDuty to ntfy and email, plus signed webhooks for your own code.
Add one under Integrations, paste what it asks for, and press Send Test.
The project, the server, the protocol and the reason, in every tunnel alert.
Repeat down alerts wait while a server flaps. One summary follows once it's steady.
When it started, how long it lasted, who acknowledged it.
Each project has its own integrations. Turn one off, or pick them per server.
POST /hooks/tunnelhq X-TunnelHQ-Event: monitor.down X-TunnelHQ-Signature: sha256=9f2c41…e07b { "event": "monitor.down", "timestamp": "2026-10-19T16:00:53.000Z", "data": { "monitor_name": "Seoul 1", "protocol": "openconnect", "host": "seoul-1.larkspurvpn.com", "port": 443, "message": "Tunnel unreachable", "failed_stage": "connect" } }
A signed event when a tunnel or check goes down, degrades or recovers, and when its incident opens and resolves.
Each endpoint has its own secret, retries a failed delivery and shows its last 50 deliveries.
When a failed check is confirmed, by the next check with the default settings, and again when the server recovers. A server that fails in only some locations alerts only if you switch on Notify on partial outage for it.
While a VPN server flips between down and up, repeat down alerts are held back. Recoveries still go out, and once it has been steady for 15 minutes you get one summary of how many times it changed.
Yes. Set Resend Notification if Down X times consecutively in the server's settings, or for many servers at once on the Tunnels page. 0 turns it off.
A new integration covers every server in its project, however the server was added. Turn off Enable for all tunnels and checks in this project to choose integrations server by server instead.
5 integrations on Starter, and unlimited on Pro and up. The count covers your whole workspace, and every channel type is on every plan. Compare plans
Yes, as long as they're reachable from the internet. Private and internal addresses are refused.
Give an endpoint a secret and every delivery is signed with HMAC-SHA256 in X-TunnelHQ-Signature. Each delivery gets 4 attempts by default (3 retries), and every endpoint keeps a log you can redeliver from.
Better TunnelHQ, with your consent.
We use first-party, EU-hosted analytics to understand how TunnelHQ is used. No ads, no data selling, no cross-site tracking. If you decline, your visit is still counted anonymously, without cookies.
Privacy policy