NEWSecurity: sign-ins, hardening, CVEs and open ports

Production signals,
caught in real time.

Errors, slow requests, uptime checks, deploys — and who signed in to your servers — stream in live. errorgap correlates them into one incident with a likely cause, and tells you what on your hosts needs fixing.

Free tier · 50k events/moNo credit card20+ SDKs
LIVE · acme-co · productionrefreshing automatically
err
ActionView::Template::Errorapp/views/spree/home/index.haml:20
0.2s ago
sec
New SSH key for deploy@web-2authorized_keys
3s ago
warn
N+1 Query · Spree::Variantapp/views/spree/products/_card.html.erb:8
12s ago
err
NoMethodError · undefined `blah'lib/spree_core/helpers/base_helper.rb:70
38s ago
info
Deploy detected · v2.14.1CI · GitHub Actions
1m ago
sec
openssl 3.0.2 · CVE highweb-1
2m ago
err
Stripe::CardError · card_declinedapp/services/checkout/charge.rb:81
3m ago
info
Source maps uploadedreleases/api
4m ago
Trusted by teams at
How it works

From SDK to incident, automatically.

Install the SDK and ship. Errorgap captures and groups errors, correlates them with uptime, latency, and deploy signals, then assembles the evidence into an incident you can investigate.

01 · Install

Drop in the SDK

One package per runtime. Initialize with your project key and the SDK starts capturing — no manual try/catch plumbing required.

$ npm install @errorgap/node
+ added 1 package in 2s
$ export ERRORGAP_API_KEY=egp_019df…
↻ uncaught errors and rejections now reported
02 · Capture

We catch, group, dedupe

Exceptions are fingerprinted by stack signature and message — thousands of occurrences of one bug collapse into a single group with a count and a graph.

×4,212NoMethodError
03 · Correlate

Signals become an incident

A heuristic engine promotes elevated error rates, uptime failures, latency spikes, and deploy correlations into a first-class Incident.

Incident list showing correlated production incidents
04 · Investigate

Likely cause, in one place

A deterministic likely-cause panel, a confidence score, an evidence timeline, and a written AI summary — everything to act, without tab-hopping.

Incident detail with confidence score, contributing signals, and the AI summary
Incident Intelligence

When signals become an incident.

Errorgap's heuristic engine watches for six trigger conditions and assembles the evidence into one Incident object — instead of leaving it scattered across separate views.

Six heuristics · 60s cycle

One object. All the evidence.

High-volume error groups, uptime failures, error-rate spikes, latency anomalies, infrastructure saturation, and deploy correlations — when a condition fires, it becomes a first-class incident with a full evidence trail.

  • Six heuristics, evaluated on a 60-second cycle
  • Evidence timeline: error groups, releases, uptime checks, APM traces
  • Open → Acknowledged → Resolved lifecycle
  • Manual incidents for what the heuristics don't catch
Explore incidents →
Errorgap incident list with severity indicators, environment tags, and duration
AI Investigation

From signals to a likely cause, automatically.

The deterministic correlation panel runs the moment evidence loads. It derives a likely cause, scores confidence and shows the signals behind it. On plans with AI, a written summary follows on top of that evidence.

Deterministic first, AI on top

A confidence score, then a plain-English read.

Summaries write themselves when an incident opens or grows. Summarize again is still one click. The AI explains the evidence; it doesn’t decide the cause.

  • Confidence scored 10–90% from backtrace overlap, similar incidents and timing.
  • A summary, likely cause and next steps written when the incident opens.
  • “Explain this error” on any error group, with who hits it and on which page.
  • Similar incidents found by meaning, not just stack match.
See an investigation →

Runs on an errorgap-run model. Prompts are redacted first.

INC-241SummaryAI · written on open
Summary
Checkout payments started failing at 14:31, four minutes after v2.14.1 shipped. 412 card errors and three failed uptime checks on api.acme.example.
Likely cause
charge.rb:81 now reads the card token before the customer record loads. The frame appears in 96% of the new errors.
Next steps
  1. Roll back to v2.14.0 or guard the token read.
  2. Check the 18 customers who retried during the window.
confidence
78%
from deterministic evidence · redactedSummarize again
Built for the stack

Every signal, framed in context.

errorgap connects the exception to the line, the line to the deploy, and the deploy to the person who can fix it, then watches availability, latency and the hosts underneath.

Backtrace & Grouping

The line. The frame. The fix.

Every captured exception lands you on the offending source line with context and the full call stack. Same-signature errors collapse into one group; faceted search narrows thousands of groups by release, browser or user.

  • Source-map upload, including index maps
  • Occurrence context viewer and Aggregates tab
  • Fingerprint grouping, merge/split, regression detection
See a backtrace →
Errorgap backtrace view showing the highlighted source line, call stack, and fingerprint panel
Live logs

Watch your production breathe.

Stream errors, warnings and structured logs straight from your runtime. Filter by level, source, release or environment, then export what you found.

  • Live stream, sub-second latency
  • Environment tags: production, staging, dev
  • CSV and NDJSON export
Open the live stream →
Errorgap live log stream with per-level badges and timestamps
Uptime

Know when your users can't reach you.

HTTP, TCP and ping checks sweep every 10 seconds. Failures open incidents automatically and recoveries send their own alert.

  • HTTP / TCP / ping · SSL expiry
  • Recovery alerts, not just failures
  • Compare with the previous period
See uptime monitoring →
Errorgap uptime page with monitor stats, response-time trends, and 90-day availability bars
Performance · APM

Slow routes surface before users file tickets.

Transaction timing from every request and job, plus web vitals from the browser. Transaction IDs link each error to the request it happened in.

  • Browser performance: LCP, INP, CLS
  • Browser-to-server trace links
  • Query attribution per transaction
See performance →
Errorgap performance page with Apdex, request rate, response time, and error rate
Infrastructure

Hosts, containers, network and volumes, live.

CPU, memory and disk per host every 15 seconds, plus Docker containers, interface throughput and mount options. One host can feed several projects.

Alerts

Rules you can test before they page you.

Backtest a rule against last week before you turn it on. Deliver by email, Slack or the in-app inbox, with a daily digest for the rest.

Deploys & releases

Tie every error to a release.

Deploy markers on every chart, with error counts relative to the release before. Upload source maps per release so frames read as your code.

  • Relative counts per deploy
  • Deploy correlation as an incident heuristic
Security

Know who got in, and what’s open.

The same agent that ships your logs and metrics reads sign-ins, SSH and sudo config, packages and open ports, and turns them into findings with the fix command for your OS.

Sign-ins

SSH and web sign-ins, new locations, odd hours, shared accounts.

Hardening

Root login, password auth, keys, sudo paths to root.

Vulnerabilities

Installed packages matched against OSV; OS end-of-life.

Exposure

Listening ports, what’s behind them, firewall state.

Changes

Watched files (sshd_config, sudoers, authorized_keys) diffed.

Malware

Optional scheduled ClamAV scans, low priority, results as findings.

Security · acme-co31119
Host · worst firstOSFindingsSeen
web-1Ubuntu 20.04EOL24612s
db-1Rocky Linux 91359s
web-2Ubuntu 22.0403414s
worker-1Debian 1201411s
Latest
secNew SSH key for deploy@web-1authorized_keys
highopenssl 3.0.2 · 1 high CVEweb-1
secNew listening port 6379db-1 · 0.0.0.0
See Security →
AI-native

Give your AI agents production context.

Errorgap exposes a Model Context Protocol server so Claude, Cursor, Copilot, and any MCP-compatible agent can query live production data — error groups, incidents, backtraces, uptime status, and proposed fixes — without exposing your browser session.

claude_desktop_config.json
{
  "mcpServers": {
    "errorgap": {
      "url": "https://app.errorgap.com/mcp",
      "headers": {
        "Authorization": "Bearer egmcp_…"
      },
      "scopes": ["errors:read", "logs:read", "source:read"]
    }
  }
}
Errorgap Agent Access page — scoped MCP tokens with capabilities and expiry

Scoped, redacted, per project.

  • Tools: search and read errors and backtraces, list and read incidents, explain an incident, find its likely cause, propose a fix, read deploys
  • Per-project exposure toggles — six categories of data
  • Org-level defaults with per-project overrides
  • Regex-based redaction rules with live preview
  • Scoped API keys, revocable from the Agent Access page
MCP tools
◆search_error_groups◆get_error_group◆get_backtrace◆search_logs◆list_incidents◆get_incident◆explain_incident◆find_likely_cause◆propose_fix
Install

Three lines and you're shipping.

Pick your runtime. The SDK does the rest — async-safe, fork-safe, and zero overhead in dev.

// 1. Install $ npm install @errorgap/node // 2. Initialize once, as early as possible import { Errorgap } from "@errorgap/node"; Errorgap.init({ endpoint: process.env.ERRORGAP_ENDPOINT, projectSlug: process.env.ERRORGAP_PROJECT_SLUG, apiKey: process.env.ERRORGAP_API_KEY, }); // 3. Uncaught errors report themselves. For a handled one: await Errorgap.notify(err, { context: { component: "billing" } });
Integrations

Wired into the tools you already use.

Errorgap doesn't try to replace your issue tracker or your chat. It connects to them and stays out of the way.

GitHub
Auto-open issues
GitLab
Issue creation
Slack
Channel routing
Jira
Ticket creation
Webhook
Custom endpoints
Pricing

Per-event pricing. No seat tax.

Pay for what you capture, not who's logged in. Every plan includes every feature except the bits genuinely tied to enterprise compliance.

Free
$0/mo
For solo devs and side projects.
50k events / mo
  • 7-day retention
  • 1 project
  • 200 replays · 1 uptime monitor
  • Email alerts
  • Infrastructure & Security agent
  • AI summaries & explanations
  • SSO
  • Audit log
Start free
Team★ POPULAR
$29/mo
For small teams shipping prod code.
500k events / mo
  • 30-day retention
  • Unlimited projects
  • 5k replays · 10 uptime monitors
  • Slack + GitHub
  • AI summaries & explanations · 50/day
  • Infrastructure & Security agent
  • SSO
  • Audit log
Start trial
Business
$99/mo
For scaling orgs.
2M events / mo
  • 90-day retention
  • 25k replays · 50 uptime monitors
  • SSO · SAML
  • Audit log
  • AI summaries & explanations · 200/day
  • Infrastructure & Security agent
  • Priority support · 4h SLA
Start trial
Enterprise
Custom
For regulated industries.
Unlimited events
  • Unlimited AI
  • Infrastructure & Security agent
  • Dedicated infrastructure
  • Custom data residency
  • Custom SLA
  • Security review
  • Solutions architect
Talk to sales

Close the errorgap.

Start free, no credit card. Turn scattered production signals into one investigable incident in under five minutes. Cancel anytime, keep your data.