What does Lemwatch monitor?

Lemwatch runs 20+ automated checks per site: uptime, response time, SSL/TLS expiry, domain expiry, DNS changes, sitemap health, broken links, content changes, SEO audits, mobile usability, security headers, and more.

Yes. The free tier monitors up to 5 sites. Pro is $19/month for 50 sites and Agency is $59/month for 100 sites, both with full feature access.

How is Lemwatch different from UptimeRobot or Pingdom?

Lemwatch bundles uptime, change detection, SEO audits, security scans, and a public API in one platform — features competitors charge separately for. It also includes team workspaces, white-labelled status pages, and a webhook system out of the box.

Does Lemwatch send alerts?

Yes. Lemwatch supports email, browser push, webhooks, and per-site notification routing so the right person hears about the right incident.

Is there a public API?

Yes. Pro and Agency plans get a public REST API with webhooks for sites, checks, incidents, and reports.

TLS version & cipher check

Confirms your server supports TLS 1.2/1.3, rejects TLS 1.0/1.1, and uses forward-secret cipher suites.

Quick answer

We negotiate handshakes across TLS 1.0-1.3 and record which versions and ciphers your server accepts.

What it checks

TLS 1.3 supported (+bonus)
TLS 1.2 supported (required)
TLS 1.0/1.1 rejected (required for A grade)
Forward-secret ciphers only (ECDHE-based)
No RC4, 3DES, or export ciphers

Where to find it in Lemwatch

Site details → Security → SSL.

How to fix

In nginx/Apache, set ssl_protocols TLSv1.2 TLSv1.3;.
Use Mozilla SSL Config Generator's "intermediate" profile.
Reload the server.
Re-run the check.

FAQ

Will disabling TLS 1.0 break old clients?

Maybe IE10 on Windows 7. All modern browsers/apps support 1.2+.

Should I enable TLS 1.3 only?

Too aggressive — some corporate proxies stall on 1.3.

Lemwatch — All-in-One Website MonitoringUptime, performance, SEO, security, and change detection in one platform. Free tier available.Pricing · Features · Sign Up