Features · SaaS Portfolio Intelligence
Everything you need to run a portfolio of SaaS apps
Monitoring, security, capacity, costs and margins for every app you build or manage — in one place, with nothing to install in your apps.
Monitoring and health
Know every app is live and answering quickly, without opening a dozen dashboards.
15-minute website and Supabase checks
Every app's website and Supabase project is checked every 15 minutes for availability, response time and database health.
Why it matters: You hear about an outage before your customers do.
Error logs in one place
Errors from all Supabase log sources are grouped and counted over 24 hours, with email addresses masked.
Why it matters: Spot a failing feature quickly without searching each project's logs.
Provider advisories
Supabase performance and security advisories are collected for every project and shown in each app's health.
Why it matters: Hidden database risks are visible alongside uptime, not buried in another console.
Backups and last publish
Backup age and the date each app was last published are tracked against limits you set.
Why it matters: Know your recovery position and which apps have gone stale.
Alerts and history
Alerts are raised and emailed when something needs attention, and every event is kept in a timeline.
Why it matters: A clear record of what happened, when, and who reviewed it.
SIGNL4 on-call alerting
Connect your organisation's own SIGNL4 team so every alert reaches your on-call phones, and closes in SIGNL4 automatically when it is acknowledged or clears in SaaS Sentinel.
Why it matters: The right person is woken for a real outage, and nobody chases an alert that is already fixed.
Public app status pages
Turn on a status page for any app to share live status, 24-hour, 30-day and 90-day uptime, a 90-day bar strip, incidents that open and close automatically, scheduled maintenance and email updates for your customers, with your logo and a footer badge. Nothing needs adding to your apps.
Why it matters: Show customers your apps are reliable and cut "is it down?" support questions.
Security and compliance
Find the risks across your portfolio and keep a record of how each one was handled.
Certificate, domain and DNS watch
Daily checks of each app's SSL certificate and domain registration expiry, plus a history of DNS record changes.
Why it matters: Renew before visitors see a warning, and spot an unexpected nameserver or mail change the day it happens.
Security findings
Daily checks of each app's security headers, public exposure and Lovable security settings, with suggested fixes.
Why it matters: A prioritised list of what to fix, with the prompt to fix it.
Dependency vulnerabilities
Each app's linked GitHub lockfile is checked daily against the OSV vulnerability database.
Why it matters: Know when a package you rely on has a known weakness.
Risk register with review dates
Accept a risk with a reason and a 3, 6 or 12-month review date; it comes back when the date passes.
Why it matters: Decisions are documented and never quietly forgotten.
Audit trail
Every change people make is recorded automatically, with a required comment on alert and finding changes.
Why it matters: Evidence for customers, auditors and your own peace of mind.
Secure sign-in
Google or Microsoft sign-in, with multi-factor authentication you can require for your organisation.
Why it matters: No extra passwords to manage, and stronger protection where you need it.
Branding and search visibility
Make sure every app looks right when it's shared and found.
Daily branding checks
Favicon, page titles, descriptions, sharing images, robots.txt, sitemap and llms.txt are checked for leftover defaults.
Why it matters: No embarrassing placeholder text in search results or shared links.
404 page check
Confirms each app returns a proper "page not found" response, with risk acceptance for single-page apps.
Why it matters: Search engines don't index broken or empty pages.
Capacity planning
See growth coming and plan upgrades before they become emergencies.
Capacity trends
Database size, connections and other readings are charted over time for every app; missing readings are shown as gaps, never guessed.
Why it matters: Honest trends you can plan from.
Weekly capacity review
A weekly review summarises which apps are approaching their limits, with upgrade recommendations and their monthly cost.
Why it matters: Budget for upgrades instead of reacting to slowdowns.
Spend and margin
Understand what every app costs to run and what it earns.
Component costs
Record hosting, database, email and other running costs per app and per month, by cost type.
Why it matters: One true monthly cost for each app.
Invoice reading from email
Forward supplier invoices to your own address; they're read automatically and you confirm how each one is allocated.
Why it matters: Less manual data entry and fewer missed costs.
Lovable usage
Enter Lovable credit usage per project, with archived projects kept separate.
Why it matters: Your build costs sit alongside your running costs.
Licence model, break-even and margin
Set licence prices and counts to see revenue, cost per licence, break-even point and profit margin.
Why it matters: Know which apps are profitable and how many customers you need.
Reporting and teams
Keep everyone informed and every customer's data separate.
Weekly summary email
A weekly email covers health, alerts, capacity, costs, margins and anything waiting for review.
Why it matters: Stay on top of your portfolio in five minutes a week.
Multi-tenant customer separation
Agencies and developers can manage apps for many customers, with each customer's data kept apart.
Why it matters: Safely run client work from a single account.
Free tools
Try some of the same checks free, with no sign-up.
Lovable security checker
Leaked secret keys, exposed .env files, source maps and security headers.
Link preview checker
How your link looks when shared on Google, X, LinkedIn, Facebook and Slack.
CORS checker
Whether other websites can read your app's responses or use your visitors' logins.
DNSSEC checker
Whether your domain's DNS is signed, so visitors can't be sent to a forged server.
404 page checker
Whether missing pages return a real, branded 404 that helps visitors back.
See it on your own apps
14-day free trial, no card needed. Starter is £18 a month including 5 projects.