Skip to content

Third-party monitoring

Third-Party Script Monitoring

The average website loads 15-30 third-party scripts. Your payment form, analytics, chat widget, and ad tags all depend on someone else's servers. When one of them goes down or starts returning errors, your site stays "up" but critical features silently break. Sitewatch checks every external script on your pages and alerts you when something fails.

  • Monitor analytics, chat, payment, and ad tag scripts
  • Detect when scripts error, go missing, or arrive as the wrong kind of file
  • Know when third-party dependencies stop loading

Free scan

Check your third-party scripts — free

Scan any URL in 20 seconds. Sitewatch lists the external scripts your page loads and flags the ones returning errors, 404s, or the wrong content type — plus broken assets, security headers, and SSL.

02The blind spot

Your site depends on scripts you do not control

Script failure detection

Without monitoring:
Users report it (if you are lucky)
Sitewatch:
Caught on next check cycle

Availability checks

Without monitoring:
Unknown until someone complains
Sitewatch:
Present and usable, verified

Vendor outage awareness

Without monitoring:
Hours or days later
Sitewatch:
Detected in scheduled check or on-demand

Right file, right type

Without monitoring:
Not checked
Sitewatch:
Every script verified

False positive prevention

Without monitoring:
N/A -- you are not checking
Sitewatch:
2-of-3 retry confirmation

Script inventory

Without monitoring:
Manual audit (if it happens at all)
Sitewatch:
Auto-discovered from your HTML every cycle

03Why it matters

Third-party scripts are your biggest blind spot

Payment form failures

When Stripe, PayPal, or Adyen scripts go down or return errors, your checkout breaks completely. Every minute is lost revenue -- and your uptime tool reports everything is fine, because your own server answered normally.

Chat widget outages

Intercom, Drift, or Zendesk scripts fail silently. Support requests go unanswered. Conversion-driving conversations never happen. Nobody notices for hours or days.

Analytics data loss

When analytics scripts stop loading, you lose attribution data, conversion tracking, and campaign insights. Decisions get made on incomplete data for days before anyone notices the gap.

Silent breakage

A third-party script that goes missing or arrives as the wrong kind of file breaks important functionality while your site looks perfectly healthy. Without checking each script, these failures are invisible.

Dependency blindness

You control your code but not your vendors. A vendor pushes a bad update, retires an endpoint, or has an outage. Unless you are checking every script on every page, you find out from your customers.

Ad tag failures

Broken ad tags mean lost revenue for publishers. Tag manager misconfigurations and ad network outages go undetected without script-level monitoring.

04Who can break your site

Every vendor running code on your pages.

Each of these runs on infrastructure you do not own. Select one to see how it fails — and how Sitewatch catches it.

Payments

revenue

How it fails — A payment script stops loading and the checkout form never appears, so nobody can buy.

How Sitewatch detects it — Checks the script is present and is really code, on every visit.

Live chat

support

How it fails — The chat widget disappears and customers have no way to reach you, silently.

How Sitewatch detects it — Alerts when a vendor that was working goes down.

Analytics

measurement

How it fails — The tracking tag fails and you lose the data you make decisions with, without noticing.

How Sitewatch detects it — Verifies analytics scripts alongside everything else the page loads.

Consent banners

compliance

How it fails — The consent tool fails to load, which can leave you tracking visitors without permission.

How Sitewatch detects it — Watches consent scripts as a first-class dependency.

Fonts and assets

presentation

How it fails — A font or asset host goes down and the page falls back to a layout you never designed.

How Sitewatch detects it — Resolves externally hosted fonts and assets on each check.

05What gets flagged

Third-party issues Sitewatch catches

Script loading failures

  • Payment scripts returning error status codes (Stripe, PayPal, Adyen)
  • Chat widget scripts failing to load (Intercom, Drift, Zendesk)
  • Analytics scripts going missing or erroring (GA, Segment, Mixpanel)
  • Ad tags and tag manager scripts unavailable or erroring

Delivery and file type issues

  • Scripts arriving labelled as something other than code, which browsers then block
  • Script URLs redirecting to error pages or unexpected destinations
  • Scripts returning 404 or 410 after vendor updates or endpoint changes
  • CDN-hosted third-party scripts serving wrong content types

06How it works

How third-party script monitoring works

  1. 01

    Discover all scripts

    Sitewatch fetches your page and parses the HTML to find every script tag -- first-party and third-party. Every external script URL is extracted automatically.

  2. 02

    Check availability and type

    Each script is requested to confirm it is there and is really code. A script that errors, goes missing, or comes back as text/html instead of application/javascript is flagged.

  3. 03

    Confirm with retries

    Detected issues go through 2-of-3 retry confirmation. Transient vendor blips are filtered out. Only persistent failures create incidents.

  4. 04

    Alert with context

    Confirmed failures alert you across your configured channels, naming the script, what came back instead of it, and the pape, and which page is affected.

07What you get

Outcomes, not a feature list.

Know when somebody else breaks your site.

Your chat widget, consent banner and payment script all run on infrastructure you do not own and cannot fix. When one goes down your own servers stay perfectly healthy — and your site still stops working properly.

$ sitewatch check yoursite.com --third-party
Google Analytics · loaded
HubSpot tracking · loaded
Intercom widget · returned a web page, not code
✕ vendor outage · support chat unavailable

15-30

Avg third-party scripts per site

2-of-3

Retry confirmation

Every script in your HTML

Coverage

You cannot control vendor outages. You can control how fast you find out.

Free plan. No credit card. 2-minute setup.

08The dependency you do not control

Why third-party scripts are a supply-chain risk — and how to monitor them

A modern web page is an assembly job. Your HTML pulls in analytics from one vendor, a chat widget from another, payment SDKs from a third, ad tags from a network, and tag managers that load still more scripts on top. The average site loads 15-30 of these. Every one of them runs in your visitor's browser with full access to your page — and every one is hosted on infrastructure you don't control. Third-party script monitoring means continuously verifying that each external script your pages reference is still reachable, returns a success status, and is served as executable JavaScript — so a vendor outage or a swapped endpoint can't silently break your site.

How third-party scripts actually fail

The failures are rarely dramatic. An analytics script starts failing to load after the vendor sunsets an endpoint, so your conversion data quietly goes dark. A chat widget's CDN serves the file as the wrong kind of file, so the browser refuses to run it and support requests stop arriving. A payment SDK like Stripe.js goes down during a regional outage, and checkout breaks for everyone — while your server keeps answering normally and your uptime tool stays green. An ad tag stops loading and a publisher loses revenue on every impression. None of these show up as "downtime," which is exactly why they go unnoticed. A healthy server doesn't mean a working page.

Mixed content and the security dimension

Third-party scripts also break in ways that browsers block outright. A script referenced over http:// on an https:// page is mixed content — modern browsers refuse to load it, and the feature it powers simply disappears. Beyond loading, third-party code is a genuine supply-chain attack surface: a compromised vendor, a hijacked subdomain, or an endpoint that starts redirecting somewhere unexpected can turn a trusted script into a liability. Sitewatch flags these at the request level by verifying status, MIME type, and redirect behavior on every check. For the protocol-level checks, see mixed-content monitoring and broader security monitoring.

What effective monitoring should check

Pinging your homepage tells you the server is alive. It tells you nothing about whether the 20 scripts that page loads are still working. Effective monitoring discovers every external script in your HTML and verifies each one's HTTP status and content type on every cycle — exactly what Sitewatch does as part of its website monitoring, with the same engine that powers broken-assets monitoring. When an entire vendor domain goes dark rather than a single file, third-party dependency monitoring catches it at the domain level, and every confirmed failure ships with root-cause context — the script, what came back instead of it, and the page it affects — so you fix it instead of hunting for it.

09FAQ

Frequently asked questions