HOSTWATCHInfrastructure control plane
Abstract signals converging on an infrastructure observation core

PRIVATE INFRASTRUCTURE INTELLIGENCE

See the pressure.
Know the cause.
Control the response.

Hostwatch connects live server health, HTTP evidence, attack detection and scoped protection. Move from an unusual request spike to a verified action without losing the ordinary users behind it.

Explore the platform ↗Open control plane →
OBSERVABILITY / DETECTION / MITIGATION

One investigation path

01 / REQUEST02 / SERVICE03 / IMPACT04 / ACTION

THE PLATFORM

Clarity at every layer

Traffic counts, saved examples and observed protection outcomes stay separate. You can see what the system measured and what remains uncertain.

01

Observe

Host, workload, HTTP and application evidence in one timeline.

Explore module ↗02

Detect

Explain traffic anomalies, enumeration and bot identity with measured signals.

Explore module ↗03

Mitigate

Preview bounded actions, apply them deliberately and verify the result.

Explore module ↗

THE NATIVE APP

Investigate from
your iPhone.

Choose a node, review host health and request evidence, then move between traffic, service and runtime views. The app offers passkey and QR sign-in; sample screens here are labeled where fabricated data appears.

Explore the iPhone and iPad app →
Hostwatch iPhone overview, sample data from a debug build
iPhone overview · labeled sample data
Hostwatch iPhone sign-in screen
Native sign-in and passkey support

SERVICES / SETUP / OPERATIONS

Know where each service belongs.

Explore service placement, observed dependencies and configured migration destinations. Review backup, verification, routing and recovery in the same workspace.

01

Inspect & move services

Review dependencies and a verified plan before changing servers.

Read the migration guide ↗02

A searchable field guide

Setup steps and current interface screenshots for the features you use.

Search all guides ↗03

The same controls through MCP

Discover services, preview a migration and follow the operation journal.

Connect your assistant ↗

DEPLOY YOUR WAY

Your infrastructure stays yours.

Run the private Go agent in your environment with a managed control plane, or self-host the full stack. Detector and mitigator are separate commercial modules with independent entitlements.

How the modules fit ↗

FROM THE BLOG

Changes worth understanding.

News analysis and engineering notes on observability, client identity and operating services safely.

Explore the blog →
Three linked revision cards for a published fix, a rebuilt application and a serving processNews analysis / runtime securityPHP2Shell: the patch is only real when the serving process changesNested host, parent group and workload boundaries with separate usage and limit indicatorsNews analysis / resource isolationA CPU limit is not a percentage: reading the cgroup v2 shiftStorage objects entering an ownership and recovery review before any reclaim decisionNews analysis / storage operationsUnused storage belongs in a review queue, not a delete queueThree separate contracts for a telemetry upgrade: API, runtime behavior and delivered evidenceNews analysis / observabilityOpenTelemetry changes its security policy. Your upgrade checks need to change too.Separate layers for an updated sandbox tool, cached template and running environment, each with its own trust stateNews analysis / sandbox securityDocker’s CA update exposes a familiar gap: patched tools, stale environments