Help center
Understand the alert.
Know what to do next.
777pinger alerts are designed to be brief. These guides explain the signal in plain language, give you a sensible first step, and show when another service provider may need to help.
Before changing anything
- Open the website or service yourself.
- Run the monitor again to rule out a temporary failure.
- Check whether hosting, DNS, email, or firewall settings changed near the alert time.
777pinger identifies the symptom. Your host, developer, DNS provider, or network administrator may need to make the final change.
Uptime is kept separate: website, API, and port checks measure availability. SSL, DNS, domain renewal, email protection, security headers, page speed, page content, and scheduled jobs report their own health or pass rate.
Troubleshooting guides
Choose the check named in your alert
Recover your account
Forgot your password, missed your invitation, or never completed your first login? Use the same account recovery form.
- Enter the email address used for your 777pinger account.
- If you receive an invitation with a temporary password, use the newest one on the Set your password page, then continue to sign in.
- If you receive a six-digit code, enter it on the recovery form with your new password. An unverified email address needs confirmation first; the form will guide you through a second code if needed.
- Allow a few minutes for delivery, check junk or quarantine, and contact support if nothing arrives. Repeated requests are temporarily limited.
Recovery does not change your plan, team access, or optional MFA. Never share your password or email code with support.
Back to all guides ↑Security headers
What it means: The website responded, but 777pinger did not find enough of the six recommended browser protections. An older alert such as “Security headers: 0/6 present” means none were visible in that response. It does not mean the site was hacked or offline.
What to do
- Run the check again to confirm the result.
- Ask your web host or developer to review HSTS, Content-Security-Policy, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and clickjacking protection.
- Add headers at the web server, application, load balancer, or CDN—wherever public responses are created.
- Test important pages after the change, especially login, payment, embedded-content, and admin pages.
Content-Security-Policy can break legitimate scripts when added too aggressively. Have the person who manages the website introduce and test it carefully.
Back to all guides ↑Website uptime
What it means: The site timed out or returned an HTTP response outside the successful 200–299 range.
What to do
- Open the exact monitored address in a browser.
- Run the check again and note the HTTP code or timeout message.
- Review your hosting status, application logs, and recent deployments.
- If only one page fails, check that page’s route, redirects, and permissions.
SSL certificates
What it means: The HTTPS connection could not be trusted, the certificate did not match the hostname, or the site did not respond correctly over HTTPS.
What to do
- Open the HTTPS address and inspect the browser’s certificate warning.
- Confirm the certificate covers the exact hostname, including www or other subdomains.
- Renew or reinstall the certificate through your host, CDN, or load balancer.
- Run the check again after the updated certificate is publicly available.
Page speed
What it means: The first website response took longer than the monitor’s current two-second limit. This is server response time, not a full browser performance score.
What to do
- Run the check again to see whether the slowdown was temporary.
- Review server load, database calls, external APIs, and recent releases.
- Enable appropriate caching and check CDN behavior.
- Watch the history before changing the limit so a real trend is not hidden.
Page content
What it means: The address responded, but the result did not look like a complete page. It may be an error page, redirect, login screen, or partial deployment.
What to do
- Open the exact monitored address in a private browser window.
- Confirm the page is available without signing in.
- Check redirects and make sure the final page contains a normal title and body.
- Review application logs if the page is blank or incomplete.
API checks
What it means: The endpoint returned an unsuccessful HTTP code, timed out, or did not provide valid JSON.
What to do
- Call the health endpoint using the same public address.
- Review the returned HTTP code and response body.
- Check API, dependency, and database logs for the alert time.
- Use a small public health endpoint that does not require secrets in its URL.
DNS health
What it means: The public resolver could not complete the lookup, the hostname did not exist, or it returned none of the supported DNS records. Subdomains do not need their own NS records to pass.
What to do
- Confirm the hostname and the domain’s nameservers at the registrar.
- Review the relevant A, AAAA, CNAME, MX or NS records with your DNS provider.
- Check for recent changes and allow time for cached answers to expire.
- Review the latest check details and try again after public resolvers update.
DNS health is separate from website uptime. A valid DNS response does not prove the website or mail server is available.
Back to all guides ↑DNS records and changes
What it means: DNS history starts automatically for public hostnames used by your monitors. Business and Enterprise include it; Pro offers a $10/month paid add-on. Monitors using the same hostname share one history, without using an extra monitor slot. Basic DNS health checks remain available without the add-on.
What to do
- Add your normal website, SSL, DNS or other public-hostname monitor. No separate DNS-history monitor is needed. example.com and www.example.com have separate histories; different URLs on the same hostname share one.
- Open any monitor for that hostname to view DNS records and changes. Automatic snapshots run about every 15 minutes on Business and Enterprise, or hourly with the Pro add-on, while at least one reference is active. Allow a short delay for the first result. Earlier records cannot be reconstructed.
- Expand a change to compare added and removed records. Refresh saved records reloads the view without running another lookup. Confirm unexpected changes with your DNS provider.
- History stays while any monitor references that hostname, including paused monitors. Deleting or changing the last reference shows a warning: continuing removes that hostname’s saved records and history from the workspace. Adding it again starts fresh. Backups expire under the backup-retention policy.
Captures A, AAAA, CNAME, MX, NS, TXT and CAA for the exact hostname, including returned aliases—not a complete zone or every subdomain. IP addresses, heartbeat addresses and private-agent targets are excluded; private names are never sent to the public DNS resolver. Up to 20 changes are retained within 30 days, subject to storage limits. Old snapshots expire too. TTL countdown and record order are ignored; failed or incomplete lookups preserve the previous snapshot. DNS changes do not affect website uptime or send outage emails.
Back to all guides ↑Import monitors
What it means: Import monitors adds a pasted list or CSV in one reviewed batch. It works with or without dashboard filters; it adds new monitors and does not edit existing ones.
What to do
- Choose Import monitors next to Add monitor. Paste one target per line, or select a CSV with a Target column. Name, Check type and Interval (minutes) are optional columns.
- Select the checks to create for each target. A CSV row with a Check type overrides this selection. Use HTTPS URLs for websites, IPv4 addresses for private ping, and host:port for private service checks.
- Choose a frequency and optional groups. Private targets require an active private agent and permission to manage it. Public checks use your workspace locations.
- Review the preview. Duplicates are skipped, invalid rows must be fixed, and frequencies are raised to the applicable plan or check-type minimum.
- Confirm Add monitors. The entire new batch must fit your remaining plan slots. A workspace change may require a fresh preview; no partial batch is added.
Up to 1,000 checks and 128 KB per import, within your existing plan limits. Each check uses one monitor slot. Imports do not buy add-ons or upgrade your plan. Allow a short delay for scheduling and first results. Only import systems you own or are authorized to monitor.
Back to all guides ↑Email protection
What it means: 777pinger could not find both an SPF record and a DMARC policy for the email domain.
What to do
- Confirm there is exactly one SPF TXT record at the root domain.
- Confirm a DMARC TXT record exists at _dmarc.yourdomain.com.
- Check that included mail services and reporting addresses are correct.
- Send a test message and review its authentication results after DNS updates.
Changing SPF, DKIM, or DMARC can affect mail delivery. Use the exact values supplied by your email provider.
Back to all guides ↑Domain expiration
What it means: The public registry date shows that the domain is approaching renewal.
What to do
- Sign in to the registrar that holds the domain.
- Confirm auto-renewal is enabled and the payment method is current.
- Verify the registrant email can receive renewal notices.
- Renew early when the domain is important to websites or email.
Scheduled jobs and heartbeats
What it means: 777pinger did not receive the expected success signal from a backup, import, or scheduled task on time.
What to do
- Check whether the job ran and completed successfully.
- Review its logs for an error or unusually long run.
- Confirm the job calls its unique 777pinger ping URL only after success.
- Adjust the expected schedule if the job legitimately needs more time.
Monitor a service inside your network
A private agent is a small program you run on an always-on computer inside your office or private network. It can check whether a selected service accepts a connection on its expected port, such as a server on port 443. The Windows agent can also ping a single IPv4 address, such as your router, using agent version 0.3.0 or newer. It does not inspect page content or prove that an application is working correctly after connecting.
Why a separate agent for each location?
Each agent checks from that network’s point of view. An Ohio office agent can reach Ohio’s private servers without exposing them to the internet, and a separate data-center agent helps you tell a local problem from a wider outage. One per separate network is a good starting point. Additional agents are not automatic failover; each monitor uses its assigned agent.
Signed Windows 11 x64 installer
Download the signed Windows installer and read its requirements. It includes Node.js, saves the local connection encrypted, and adds a startup task. Extract the whole ZIP, verify publisher 777 Easy LLC, and follow START-HERE.md for installation and the separate startup-safeguard step. Use a new location’s token only in the hidden local prompt. Confirm Connected and fresh saved results afterward.
Keep the PC awake and online. Reboot followed by manual Windows sign-in has been tested; pre-login, signed-out operation and sleep/wake are not qualified. Updates are manual. Review the download page’s maintenance limitation before installation. Do not bypass Windows security warnings or replace an existing working location just to try the installer.
Manual foreground setup
- Use an active Pro, Business, or Enterprise plan. Open Private agents, name your location, and create its agent.
- Save the one-time token securely. Download the agent and install Node.js 22 or later on a computer that stays on in that network. No inbound firewall port is needed; allow outbound HTTPS to app.777pinger.com and access to only the services you intend to check.
- On Windows, use the guided steps in Private agents. Download both the agent and Windows starter into the same folder. The starter checks for Node.js and prompts privately for your token; do not paste the token into a command. It starts a foreground connection test, not an automatic Windows service. Follow your organization’s script policy.
- Leave the program running. Connection status refreshes while the Private agents page is visible. Look for Connected, then add a Local port or service monitor, choose this location, and enter the host and port, for example
server.local:443. Connected means the agent checked in, not that every monitored service is healthy. - Allow a short delay after changes. Checks follow your plan’s schedule. The initial command runs only while that computer and program remain running; arrange a supervised service or startup task before relying on it unattended.
The Windows starter runs assigned ping and service-port checks only. It does not enable subnet discovery, install at startup, save the token to disk, or change firewall rules. Keep an existing working service in place; do not start a second copy for the same location. Arrange supervised startup before relying on unattended checks.
Ubuntu 24.04 x64 installer
Download the Ubuntu 24.04 x64 installer and follow its guided setup. It includes Node.js, prompts privately for the token, and creates an encrypted-credential startup service. Verify the archive against the checksum on the official HTTPS page before extracting; the Linux package is not publisher-signed. TCP checks only, with manual updates. Confirm Connected and a fresh saved result afterward.
Other Linux distributions or macOS
These platforms are not qualified by the Ubuntu installer. Do not bypass its platform checks or copy a connected installation. Contact support before planning a different-platform setup. Linux ping and router packages are not included.
Router and internet checks
Add a Device or internet ping monitor for your router and another for an internet address you are allowed to check. Choose your Windows agent for both. A reply means that address was reachable from that computer at that time; it does not test DNS resolution, website content, or every internet destination. Ping may be blocked even when a device is working.
Turn on “Alert if this agent stops checking in” for the location. After five minutes without a check-in, the cloud shows a warning and emails the outage recipients selected in Notifications. A reconnect message uses your recovery recipients. Allow a short delay. Existing locations keep this option off until you enable it; it requires active paid private-monitoring access. Connection health does not change device check frequencies or use another monitor slot.
If the PC cannot reach 777pinger, it cannot upload fresh router or internet results. A sleeping PC, stopped agent, lost Wi-Fi, router problem, or internet outage can all cause the same missing check-in. Treat old green device results as historical, not a diagnosis. Check the PC and local network before deciding the router is down. Reconnection clears the connection warning; device results update on their normal schedule.
If a check fails
- Confirm the agent computer is on and the location is Connected. If the agent itself is offline, new checks cannot run; do not treat an older green result as proof the service is still reachable.
- Check that the service is running on the expected host and port, and that the local firewall allows the agent to reach it.
- After restoring the service or network path, wait for the next check. A successful result resolves the open incident. Choose alert recipients under Notifications.
Updating a manual foreground agent? Stop it, download the latest agent (0.3.1), and restart with the same token. Version 0.3.1 adds private token input for the Windows starter; existing 0.3.0 installations do not need to change to keep their current checks running. For an agent installed with the signed package, use its SUPPORT.md and separate Maintenance launcher instead—do not copy program files into the installation. If a token is exposed, revoke the location immediately; this stops its access and pauses its assigned monitors.
Back to all guides ↑Visitor insights
What it means: An optional, cookie-free view of which page paths people open, their referrer domain and country, device category, and real page-load timing. It does not save query strings or raw visitor IP addresses.
What to do
- Open Integrations, then add the website name and domain under Visitor insights.
- Copy the generated tracking line and place it in the website header.
- Visit a page on the website, wait up to five minutes, then press Refresh.
- Use the website selector to compare one site with the combined view.
- To provide a privacy opt-out, have your site’s privacy control call pingerInsights.optOut(). Calling pingerInsights.optIn() allows future page views again.
The script automatically skips browsers with Do Not Track or Global Privacy Control enabled. Deleting a tracked website from 777pinger also deletes its collected events. Describe this measurement in your own privacy notice and obtain consent where required.
Back to all guides ↑Slack, Discord, Teams and webhooks
What it means: Send monitor failures and recoveries to your team’s chosen channel. The Integrations page includes service-specific setup instructions and troubleshooting.
What to do
- Open Integrations and choose Slack, Discord, Microsoft Teams or Generic HTTPS webhook. Follow the guide to create a private webhook address.
- For Discord, use a standard text channel. For Teams, use a Workflows incoming webhook allowed by your organization, not an old Office connector; add a co-owner for continuity.
- Paste the complete private address into the hidden URL field and name the destination. New Discord and Teams destinations start paused.
- Choose Send test, then check the intended channel for the [TEST] message. An accepted request alone does not prove the message appeared—especially with Teams workflows.
- Enable the destination. In Monitors, use the alert icons for one monitor or bulk alert-channel controls for several. Discord and Teams start off on existing monitors; enabling a destination does not change those choices.
- If an address is exposed, pause and delete it here, then replace or revoke it with the provider. Never share webhook addresses with support.
Saved addresses are encrypted and never returned to your browser. Tests can send while a destination is paused, with workspace limits of one per minute and ten attempts per hour. Each enabled destination of a type receives alerts from monitors allowing that type. Existing duplicate/rapid-change safeguards still apply. Network-discovery changes remain email-only, and SMS schedules do not apply to chat integrations.
Back to all guides ↑Text-message alerts
What it means: Business and Enterprise include SMS access. Pro offers a $10/month text-alert add-on. Access starts only after payment is confirmed; buying access does not verify a phone or consent on its owner's behalf.
What to do
- Open Settings → Plan and billing to check your access. If needed, review and complete payment for the add-on or plan. Refresh after payment is confirmed.
- Open Notifications → Text-message alerts. Enter a name and mobile number including the country code. Request a code only with the phone owner's permission; read and confirm the separate permission and privacy notices.
- Choose 24/7, or custom days and hours in the recipient's time zone. With custom hours, choose whether to skip outside-hours alerts or send them when the next allowed window starts.
- Select Send verification code, then enter the six-digit code on 777pinger and choose Verify and enable texts. Codes expire after 10 minutes and allow five guesses. Never send the code to support.
- Choose the recipient's alert categories. On Monitors, use the alert-channel controls for one monitor or select several for a bulk change. The recipient and the monitor must both allow texts.
- Use Set text hours to change the saved schedule, or pause the recipient to stop alerts. Check the safety allowance in Notifications; long messages and failed attempts can consume multiple reserved units.
Reply STOP to block 777pinger texts. START allows fresh setup but does not restart alerts: request and verify a new code with permission. Resend waits increase from 1 minute to 15 minutes, 1 hour, 24 hours and then 7 days; account and request-source limits also apply. Unchanged outages do not generate repeated reminders. Rapid status changes temporarily pause a monitor's notifications and are shown in the dashboard; checks continue. Delayed texts combine changes per monitor and expire after 8 days. Texts pause at workspace or service-wide safety limits, while configured email alerts can continue. Message and data rates may apply. Network-discovery change notices remain email-only.
Back to all guides ↑Optional authenticator MFA
What it means: MFA adds a one-time code from an authenticator app after your password. It is optional for each 777pinger account.
What to do
- Open Settings and find Authenticator MFA.
- Choose Set up authenticator and scan the QR code with your authenticator app.
- Enter the six-digit code to confirm setup.
- Keep your current session open, then test one new sign-in before closing it.
- Save the authenticator account in your app’s encrypted backup if that option is available.
If you lose the authenticator account, email support@777pinger.com. We will verify account ownership before resetting MFA. A password reset by itself does not remove MFA.
Back to all guides ↑Still unsure?
Send us the alert text
Include the monitor name, approximate time, and what you already checked. Never send passwords, API keys, or private credentials.
Guided monitor setup and editing
Choose Add monitor to open the setup wizard. Choose your goal, enter the target, select checks and a schedule, then review before saving. Each website check uses one monitor slot. Available frequencies and private-agent access follow your current permissions and paid plan; the wizard does not buy upgrades or enable unpaid features.
Describe what you want instead accepts common requests such as “Check example.com uptime and SSL every hour.” This is a small browser-based suggestion helper, not an AI chat service. It does not send your request to an AI provider or save anything automatically. Review all suggested settings and never enter passwords or tokens.
To change an existing monitor, open its details and choose Edit with guidance. The check type stays unchanged; target changes still show the DNS-history removal warning when applicable. The original Edit button remains available. Choose Use manual form at any wizard step to keep working with the same draft.
Network discovery and multi-port scans stay under Network & security with their separate subnet authorization. Saving an ordinary monitor schedules checks and uses existing notification settings; it does not install an agent, run a manual test or send a test email.
Local network discovery and port scanning
Use Network & security to check an approved private IPv4 address or subnet. A scan uses one monitor slot and a separate shared budget of 65,536 address-and-port connection attempts per workspace per UTC day. Unfinished scans continue in later batches, including the next day when needed. No extra charge or automatic monitor creation is triggered by discovery.
- Create a private agent in an active Pro or higher workspace.
- Open Network & security. Choose the agent, a private IP or /24-or-smaller subnet, and single ports, a list, ranges, or all TCP ports for one IP.
- Confirm you own the network or have permission. Approval is recorded; it is not a certificate of ownership. Only administrators with both monitor and agent management access can configure scans.
- Follow the three-file extension setup shown there. On the PC, explicitly set
PINGER_SCAN_SUBNETSto the approved private subnets. Stop the old agent before launching the extension, which also handles ordinary checks. Existing automatic-startup scripts need a deliberate update; nothing is installed or restarted automatically. - Let the first completed pass establish the baseline. Later new addresses, hardware-address changes and explicit open/closed port changes create review findings in the dashboard. Mark changes reviewed after checking them.
Up to 256 address-and-port checks repeat no faster than hourly; up to 4,096 repeat no faster than every six hours; larger scans repeat daily. Plan limits also apply. Bulk frequency changes conservatively keep network scans daily. Scan budgets include retries. Batching can cause delays; ordinary checks continue independently.
Discovery uses TCP replies and, on Windows, reachable entries in the local neighbor table. Reverse DNS supplies hostnames when available. This is not a complete DHCP/switch inventory: filtered, sleeping, isolated or IPv6-only devices can be missed. Manufacturer and operating-system identification are not currently provided. A changed or randomized MAC address is not proof of an intruder.
Timeouts remain inconclusive. Last-known devices and open ports stay visible with their observation times; only an explicit refusal removes a previously observed open port. Changes remain reviewable instead of changing uptime totals. There is no automatic blocking, exploit testing, login attempt, UDP scan or public-network scan.
Findings are not service-health checks
An open TCP port means a connection was accepted from this agent at that time. It does not prove that a website, file server or other application works correctly, or that it is vulnerable. For availability alerts, add an individual service monitor. Scanning does not log in to devices, list network shares, read files, try passwords or install fixes. Observed addresses, available hostnames and hardware addresses, ports and supported software greetings are uploaded to your workspace—not file contents or passwords.
After the first baseline, detected network changes appear here and in Incidents. Findings remain open until you mark them reviewed; this acknowledges the change, not that the device is secure or repaired. Changes appear after a pass finishes, so a large or budget-limited scan can take longer than expected. A newly seen address can be a returning device or an address change, not necessarily a new physical device or intruder.
Optional network-change emails
Enable Email new changes when creating a scan, or open Network-change email settings below Saved scans. It is off by default. Select recipients under Website, DNS & email in Notifications; existing sign-in/verification requirements, recipient preferences and bounce suppression apply. Summaries include the scan name, observed time and up to five address/port changes, with a link to the remaining history.
The first inventory never sends an email. After that, one summary is queued when the scan first needs review. Further changes remain in the dashboard without repeat emails until you mark changes reviewed. Enabling emails does not send old findings; review existing changes first. Acknowledgement does not send a recovery message, and CVE research does not generate emails. Network-change text alerts are not included yet.
The agent processes a few recipients per check-in, so delivery can take several check-ins and requires the agent to stay connected. Pending summaries expire after 24 hours. Pausing the scan, disabling emails, revoking its agent, losing paid access or reviewing findings prevents further sending while that condition applies; email already in flight cannot be recalled. Uncertain attempts are not automatically retried, to avoid duplicate messages. The saved scan shows queued, accepted, skipped or unconfirmed results; acceptance by the email service does not guarantee inbox delivery.
CVE research, not a clean bill of health
A CVE is a published security issue. The extension can passively read an OpenSSH greeting on port 22. Other product versions can be entered manually. The research tool sends only the selected software product and version to NVD and shows up to 100 advisories (structured OpenSSH version matches, keyword research for other products), including available CISA exploited-vulnerability enrichment. Keyword matches are not proof that an endpoint is vulnerable: fixed versions, vendor backports and unrelated products can appear. Verify the advisory with the vendor. No matches or an unavailable data source does not mean secure. Authenticated patch checks and installed-software inventory are not included in this version.
CVE research runs only when requested and does not send vulnerability alerts. Separately, a limited built-in SSH advisory can flag a saved, supported Ubuntu OpenSSH greeting for patch review. It is not a full vulnerability scan, a current patch-status check or a certification. Saved greetings can be old; verify the installed package and vendor guidance before acting.
Scan settings, latest inventory and up to 100 change entries are retained until the scan monitor is deleted. This history is separate from normal raw check-result retention. Delete the monitor through its detail view when it is no longer needed.