Skip to content
Watchtower
DocsGuidesBlogCommunityStatusChangelog
Sign in
DocsGuidesBlogCommunityStatusChangelog
Sign in
Security
Docs
Alerting
  • Alert intake from other tools
  • RUM alerts and dashboards
Api
  • GraphQL API
  • Query API
  • Sdks
Compliance
  • Erasure requests and legal holds
Connectors
  • Asana
  • Azure DevOps
  • Beyla / OBI (eBPF auto-instrumentation)
  • Integration catalog and marketplace
  • Change-event sources
  • CI visibility
  • Deployments from CI
  • ClickUp
  • Falco
  • Feature flags
  • Gatus
  • GitHub
  • GitLab
  • Grafana
  • Jira
  • Linear
  • SAP (APM-001)
  • Security event connectors
  • ServiceNow
  • Shortcut
  • Slack
  • Team sync
  • Microsoft Teams
  • Tetragon
  • Connector tiers (CON-014)
  • Wazuh
Editor
  • JetBrains
  • Editor language server (wtctl lsp)
  • VS Code
Infra
  • wt-agent
  • Cloud metric pulls
  • Cloud and virtualization
  • Cloudflare
  • eBPF whole-system profiler (ebpfprofiler)
  • eBPF zero-code tracing and network telemetry
  • Fleet control
  • Integrations
  • Kubernetes cost and rightsizing
  • Network configuration management
  • Serverless (AWS Lambda)
  • Vercel drains
Ingest
  • Archive, rehydration and pipeline replay
  • Angular
  • CDN script tag
  • Next.js
  • React
  • SvelteKit
  • Vanilla JavaScript
  • Vue
  • Browser logs
  • Browser profiling
  • Ingest cost shaping
  • Data contracts and the attribute registry
  • Datadog Agent
  • Elasticsearch bulk (Beats, Logstash, Fluentd)
  • Scheduled data export (PLT-028)
  • Log files (filelog)
  • Fluent Bit
  • Jaeger
  • systemd journald
  • Log index tuning
  • Loki push (Promtail, Alloy, Grafana Agent, Docker driver)
  • Importing metric samples
  • Mobile crash and vitals ingest (server half)
  • Ingest pipelines
  • Private connectivity: per-zone ingest endpoints
  • .NET
  • Go
  • JVM (Java, Kotlin, Scala)
  • Native (C, C++, any Linux binary)
  • Node.js
  • Python
  • Ruby
  • Rust
  • Profiles
  • Prometheus metrics
  • Relays: store-and-forward ingestion at the edge
  • Sources and destinations
  • Splunk HTTP Event Collector
  • Syslog
  • Telegraf
  • Storage tiers, per-filter retention, trace pinning, archive search
  • OpenCensus and Kafka span receivers (ING-011)
  • Usage intelligence
  • Vector
  • Loading exported Parquet into a warehouse
  • Zipkin
Instrumentation
  • Dotnet
  • Dynamic Probes
  • Go
  • Java
  • Native
  • Node
  • Php
  • Python
  • Ruby
Migration
  • Migrating to Watchtower
  • From Datadog
  • Importing from export files
  • From Grafana
  • On-call migrations
  • From Splunk
Notifications
  • Notification channel catalog (P3-N5, ALT-033)
Onboarding
  • Browser
  • Dotnet
  • Go
  • Java
  • Node
  • Python
  • Rust
Oncall
  • On-call analytics and postmortems
  • Live call routing and IVR (ONC-016)
Plugins
  • plugin.yaml
  • Plugin SDK
  • Plugin security
Query
  • Query cost guardrails
  • Federated queries and HA deduplication
  • Query functions
  • Lucene and KQL log filters
  • Metric query dialects (MET-016)
  • Metric query extensions and the Datadog-style dialect
  • Pipe language
  • PromQL compatibility
  • SQL tables
  • Trace query language and funnels
Sdk
  • Go
  • wt-dev: local OTLP sink
Security
  • Audit log: integrity, export, forwarding
  • SCIM provisioning
  • External secret stores (SEC-011)
  • Signed ingest (SEC-015)
  • Single sign-on, JIT and MFA policy
Uptime
  • Uptime check types
  • k6-compatible scripts and load tests (UPT-002)
  • Mobile app checks (UPT-006)
  • Private locations (UPT-013)
  • Static source IPs (UPT-013)
  • Trace-based tests
  • Accessibility statement: hosted activity log and <wt-activity>
  • Activity log governance and compliance
  • Product analytics boundary
  • Configuration as code
  • Cloud cost
  • Deep links and embedding
  • DORA metrics
  • Health endpoints for status pages
  • Plan limits and licenses
  • Notification delivery
  • Privacy: RUM and session replay
  • Profiling overhead
  • Profiling platform coverage
  • Session replay operations
  • SDK and instrumentation support matrix
  • Usage, budgets and cost allocation
  • Workflows
  1. Docs
  3. Security

Security

5 pages · Updated Nov 1, 2026

  • Audit log: integrity, export, forwardingUpdated Nov 1, 2026 · 2 min read→
  • SCIM provisioningUpdated Nov 1, 2026 · 2 min read→
  • External secret stores (SEC-011)Updated Nov 1, 2026 · 3 min read→
  • Signed ingest (SEC-015)Updated Nov 1, 2026 · 1 min read→
  • Single sign-on, JIT and MFA policyUpdated Nov 1, 2026 · 1 min read→
← PrevSdkNext →Audit log: integrity, export, forwarding
Watchtower

Open observability you can run yourself.

Resources
  • Docs
  • Guides
  • Blog
  • Community
  • Changelog
  • Status
Legal
  • Terms
  • Privacy
  • Cookies
  • DPA
  • Subprocessors
Watchtower
⌘CtrlK