Metric Tower
Metric Tower is a team-scoped, API-first platform combining vulnerability scanning, infrastructure monitoring, phishing simulation, status pages, on-call rot…
What Metric Tower is
Metric Tower is a team-scoped, API-first platform combining vulnerability scanning, infrastructure monitoring, phishing simulation, status pages, on-call rotations, and incident response. It provides 98 scanner modules across eight categories with automatic dependency resolution. Monitoring covers nine types, including uptime, DNS, SSL, certificate-transparency logs, cron jobs, ports, blocklists, CSP, and dead-man workflows. Teams can configure escalation policies, on-call rotations, and 12 notification channels. Phishing features include more than 40 templates, live campaign tracking, and automatic enrollment for users who click. Findings can create tickets in Jira, Linear, GitHub Issues, Zendesk, ServiceNow, Azure DevOps, ClickUp, Asana, or Freshdesk, and export to PDF, JSON, CSV, SARIF, or Markdown. The free tier costs nothing, includes 10,000 lookups per day and a bulk feed with attribution, requires no credit card, and includes a 10-day trial. Self-hosting uses Docker Compose.
Good
- 98 scanner modules across eight categories
- Nine infrastructure monitoring types
- 12 notification channels
- Multiple ticketing integrations
- Docker Compose self-hosting
Watch out
- Free activity logs retained 30 days
- Cloud metric snapshots retained seven days
- Formal compliance audit not completed
- Kubernetes deployment reference is on roadmap
Who it suits
Metric Tower suits teams that need security scanning, operational monitoring, alerting, phishing exercises, and incident workflows in one platform. It also fits organizations wanting API access or Docker Compose self-hosting.
Verdict
Metric Tower covers a broad set of scanning, monitoring, phishing, and incident-response tasks. Its free retention limits and stated compliance status matter when planning operations.
Plans and prices
From Metric Tower's own pricing page, checked 1 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free tier | Free | 10,000 lookups/day · free bulk feed with attribution · no credit card |
The facts
Each one read from Metric Tower's own pages, with the date it was checked.
What it does
- Alerting
- Metric Tower offers escalation policies, on-call rotations, and 12 notification channels.checked 1 Oct 2026
- Authentication
- Authentication supports Google OAuth 2.0, TOTP, WebAuthn/FIDO2 security keys, and passwordless email codes, with team-wide MFA enforcement for administrators.checked 1 Oct 2026
- Compliance posture
- Metric Tower says SOC 2 Type I is on its roadmap and that it aligns controls with SOC 2, ISO 27001, and GDPR principles without having completed a formal audit.checked 1 Oct 2026
- Exports
- Findings can be exported as PDF, JSON, CSV, SARIF, or Markdown, and uptime reports and executive summaries can be generated as PDFs.checked 1 Oct 2026
- Monitoring
- Infrastructure monitoring covers nine monitor types, including uptime, DNS, SSL, certificate-transparency logs, cron jobs, ports, blocklists, CSP, and dead-man workflows.checked 1 Oct 2026
- Phishing
- Its phishing and training features include more than 40 templates, live campaign tracking, and automatic enrollment for users who click.checked 1 Oct 2026
- Product scope
- Metric Tower combines vulnerability scanning, DNS, SSL, uptime and cron monitoring, phishing simulation, status pages, on-call rotations, and incident response in one team-scoped, API-first platform.checked 1 Oct 2026
- Retention limit
- Free accounts retain activity logs and cron-job run history for 30 days, while cloud metric snapshots are retained for seven days.checked 1 Oct 2026
- Scanner isolation
- Each scanner tool runs in its own Docker sidecar with separate filesystem, network, and resource limits under a dedicated non-root user.checked 1 Oct 2026
- Scanning
- The platform provides 98 scanner modules across eight categories with automatic dependency resolution.checked 1 Oct 2026
- Self-hosting
- The product is deployed via Docker Compose today, while a Kubernetes deployment reference is on the roadmap and enterprise teams can discuss early-access self-hosted builds.checked 1 Oct 2026
- Support contact
- Metric Tower directs enterprise, on-premises, and whitelabel inquiries to its contact page.checked 1 Oct 2026
- Ticketing integrations
- Vulnerability findings can create tickets in Jira, Linear, GitHub Issues, Zendesk, ServiceNow, Azure DevOps, ClickUp, Asana, or Freshdesk.checked 1 Oct 2026
Alternatives to Metric Tower
- 1
Dotcom-Monitor
Free planAndroidiOSWebAPI8.3From $13.33 a month - 2
Nagios XI
Free planWebAPILinuxmacOS8.1$2,595 one-time - 3
TLDTrack
Free planAndroidiOSWebAPI8.0From $11 a month - 4
Visual Sentinel
Free planAndroidiOSWebAPI8.0From $6 a month - 5
Paessler PRTG Network Monitor
Free planAndroidiOSWebAPI7.7From $200 a month - 6
Domain Monitor
Free planAndroidWebAPI7.6From £6.39 a month