HeyOnCall vs MonoDuty

HeyOnCall combines website and API monitoring with incident management and on-call paging. Checks cover HTTP and HTTPS availability and performance, response assertions, redirects, and request or response inspection. SSL monitoring validates certificates and chains and can warn before expiration; heartbeat and cron monitoring are also included. Teams can set timezone-aware rotations, change or trade shifts, and sync Google Calendar, Outlook, or iCalendar feeds. Unacknowledged incidents can escalate to another user, a rotation, or everyone in a rotation. Its iOS and Android Critical Alerts can bypass Do Not Disturb, silent or vibrate modes, and volume settings, and repeat until acknowledged. Alert sources include Datadog, Prometheus Alertmanager, Uptime Kuma, and other webhook-capable tools; notifications can be sent through Slack, email, Telegram, or webhooks. The API supports custom triggers, incident resolution, and custom payloads. Plans are billed monthly: Free Trial for evaluating is free, Solo is $3 a month, and Pro is $32 a month. The evaluation plan limits users and triggers, while paid plans are limited to 1000 triggers of each listed type.

MonoDuty is a workspace-based incident management service for teams responsible for production systems. It brings together team-owned services, on-call schedules, escalation policies, Heartbeats, uptime Monitors, and email, SMS, and voice notifications. All published plans include on-call scheduling. Systems that can send HTTP requests can submit incidents through its Universal HTTP Webhook using MonoDuty's documented JSON payload; Pro and Business plans can send lifecycle updates to Slack, Discord, and Microsoft Teams. Monitors check websites and APIs from Helsinki, tracking response times, validating responses, checking HTTPS certificates, and alerting on recovery. A REST API uses scoped, short-lived customer tokens, with documented access for incidents, services, and Monitors. Security controls include TLS 1.2/1.3, workspace roles, rate limits, CSRF protection, and optional time-based one-time-password MFA. MonoDuty says it does not currently publish security certifications. Its production service runs on a single European virtual server, without promised geographic failover, load-balanced application replicas, or provider redundancy. The free plan includes seven-day incident retention; Pro and Business list 30- and 90-day retention. A 14-day trial is listed.