Third-party monitoring
Third-Party Script Monitoring
The average website loads 15-30 third-party scripts. Your payment form, analytics, chat widget, and ad tags all depend on someone else's servers. When one of them goes down or starts returning errors, your site stays "up" but critical features silently break. Sitewatch checks every external script on your pages and alerts you when something fails.
- Monitor analytics, chat, payment, and ad tag scripts
- Detect when scripts error, go missing, or arrive as the wrong kind of file
- Know when third-party dependencies stop loading
Third-party script failure
Affected scripts
- Stripe.js -- 503 Service Unavailable6:00 AM
- Intercom widget -- MIME type text/html (expected JS)6:00 AM
- Google Analytics -- 200 OK6:00 AM
- HubSpot tracking -- 200 OK6:00 AM
Free scan
Check your third-party scripts — free
Scan any URL in 20 seconds. Sitewatch lists the external scripts your page loads and flags the ones returning errors, 404s, or the wrong content type — plus broken assets, security headers, and SSL.
02The blind spot
Your site depends on scripts you do not control
| Scenario | Without monitoring | Sitewatch |
|---|---|---|
| Script failure detection | Users report it (if you are lucky) | Caught on next check cycle |
| Availability checks | Unknown until someone complains | Present and usable, verified |
| Vendor outage awareness | Hours or days later | Detected in scheduled check or on-demand |
| Right file, right type | Not checked | Every script verified |
| False positive prevention | N/A -- you are not checking | 2-of-3 retry confirmation |
| Script inventory | Manual audit (if it happens at all) | Auto-discovered from your HTML every cycle |
Script failure detection
- Without monitoring:
- Users report it (if you are lucky)
- Sitewatch:
- Caught on next check cycle
Availability checks
- Without monitoring:
- Unknown until someone complains
- Sitewatch:
- Present and usable, verified
Vendor outage awareness
- Without monitoring:
- Hours or days later
- Sitewatch:
- Detected in scheduled check or on-demand
Right file, right type
- Without monitoring:
- Not checked
- Sitewatch:
- Every script verified
False positive prevention
- Without monitoring:
- N/A -- you are not checking
- Sitewatch:
- 2-of-3 retry confirmation
Script inventory
- Without monitoring:
- Manual audit (if it happens at all)
- Sitewatch:
- Auto-discovered from your HTML every cycle
03Why it matters
Third-party scripts are your biggest blind spot
Payment form failures
When Stripe, PayPal, or Adyen scripts go down or return errors, your checkout breaks completely. Every minute is lost revenue -- and your uptime tool reports everything is fine, because your own server answered normally.
Chat widget outages
Intercom, Drift, or Zendesk scripts fail silently. Support requests go unanswered. Conversion-driving conversations never happen. Nobody notices for hours or days.
Analytics data loss
When analytics scripts stop loading, you lose attribution data, conversion tracking, and campaign insights. Decisions get made on incomplete data for days before anyone notices the gap.
Silent breakage
A third-party script that goes missing or arrives as the wrong kind of file breaks important functionality while your site looks perfectly healthy. Without checking each script, these failures are invisible.
Dependency blindness
You control your code but not your vendors. A vendor pushes a bad update, retires an endpoint, or has an outage. Unless you are checking every script on every page, you find out from your customers.
Ad tag failures
Broken ad tags mean lost revenue for publishers. Tag manager misconfigurations and ad network outages go undetected without script-level monitoring.
04Who can break your site
Every vendor running code on your pages.
Each of these runs on infrastructure you do not own. Select one to see how it fails — and how Sitewatch catches it.
revenue
Payments
✕How it fails
A payment script stops loading and the checkout form never appears, so nobody can buy.
✓How Sitewatch detects it
Checks the script is present and is really code, on every visit.
Payments
revenueHow it fails — A payment script stops loading and the checkout form never appears, so nobody can buy.
How Sitewatch detects it — Checks the script is present and is really code, on every visit.
Live chat
supportHow it fails — The chat widget disappears and customers have no way to reach you, silently.
How Sitewatch detects it — Alerts when a vendor that was working goes down.
Analytics
measurementHow it fails — The tracking tag fails and you lose the data you make decisions with, without noticing.
How Sitewatch detects it — Verifies analytics scripts alongside everything else the page loads.
Consent banners
complianceHow it fails — The consent tool fails to load, which can leave you tracking visitors without permission.
How Sitewatch detects it — Watches consent scripts as a first-class dependency.
Fonts and assets
presentationHow it fails — A font or asset host goes down and the page falls back to a layout you never designed.
How Sitewatch detects it — Resolves externally hosted fonts and assets on each check.
05What gets flagged
Third-party issues Sitewatch catches
Script loading failures
- Payment scripts returning error status codes (Stripe, PayPal, Adyen)
- Chat widget scripts failing to load (Intercom, Drift, Zendesk)
- Analytics scripts going missing or erroring (GA, Segment, Mixpanel)
- Ad tags and tag manager scripts unavailable or erroring
Delivery and file type issues
- Scripts arriving labelled as something other than code, which browsers then block
- Script URLs redirecting to error pages or unexpected destinations
- Scripts returning 404 or 410 after vendor updates or endpoint changes
- CDN-hosted third-party scripts serving wrong content types
06How it works
How third-party script monitoring works
- 01
Discover all scripts
Sitewatch fetches your page and parses the HTML to find every script tag -- first-party and third-party. Every external script URL is extracted automatically.
- 02
Check availability and type
Each script is requested to confirm it is there and is really code. A script that errors, goes missing, or comes back as text/html instead of application/javascript is flagged.
- 03
Confirm with retries
Detected issues go through 2-of-3 retry confirmation. Transient vendor blips are filtered out. Only persistent failures create incidents.
- 04
Alert with context
Confirmed failures alert you across your configured channels, naming the script, what came back instead of it, and the pape, and which page is affected.
07What you get
Outcomes, not a feature list.
Know when somebody else breaks your site.
Your chat widget, consent banner and payment script all run on infrastructure you do not own and cannot fix. When one goes down your own servers stay perfectly healthy — and your site still stops working properly.
15-30
Avg third-party scripts per site
2-of-3
Retry confirmation
Every script in your HTML
Coverage
You cannot control vendor outages. You can control how fast you find out.
Free plan. No credit card. 2-minute setup.
08The dependency you do not control
Why third-party scripts are a supply-chain risk — and how to monitor them
A modern web page is an assembly job. Your HTML pulls in analytics from one vendor, a chat widget from another, payment SDKs from a third, ad tags from a network, and tag managers that load still more scripts on top. The average site loads 15-30 of these. Every one of them runs in your visitor's browser with full access to your page — and every one is hosted on infrastructure you don't control. Third-party script monitoring means continuously verifying that each external script your pages reference is still reachable, returns a success status, and is served as executable JavaScript — so a vendor outage or a swapped endpoint can't silently break your site.
How third-party scripts actually fail
The failures are rarely dramatic. An analytics script starts failing to load after the vendor sunsets an endpoint, so your conversion data quietly goes dark. A chat widget's CDN serves the file as the wrong kind of file, so the browser refuses to run it and support requests stop arriving. A payment SDK like Stripe.js goes down during a regional outage, and checkout breaks for everyone — while your server keeps answering normally and your uptime tool stays green. An ad tag stops loading and a publisher loses revenue on every impression. None of these show up as "downtime," which is exactly why they go unnoticed. A healthy server doesn't mean a working page.
Mixed content and the security dimension
Third-party scripts also break in ways that browsers block outright. A script referenced over http:// on an https:// page is mixed content — modern browsers refuse to load it, and the feature it powers simply disappears. Beyond loading, third-party code is a genuine supply-chain attack surface: a compromised vendor, a hijacked subdomain, or an endpoint that starts redirecting somewhere unexpected can turn a trusted script into a liability. Sitewatch flags these at the request level by verifying status, MIME type, and redirect behavior on every check. For the protocol-level checks, see mixed-content monitoring and broader security monitoring.
What effective monitoring should check
Pinging your homepage tells you the server is alive. It tells you nothing about whether the 20 scripts that page loads are still working. Effective monitoring discovers every external script in your HTML and verifies each one's HTTP status and content type on every cycle — exactly what Sitewatch does as part of its website monitoring, with the same engine that powers broken-assets monitoring. When an entire vendor domain goes dark rather than a single file, third-party dependency monitoring catches it at the domain level, and every confirmed failure ships with root-cause context — the script, what came back instead of it, and the page it affects — so you fix it instead of hunting for it.
09FAQ
Frequently asked questions
You can manually open your browser's DevTools Network tab, reload the page, and inspect every external script for its status code and content type — but that's a one-time snapshot you'd have to repeat constantly. Sitewatch automates it: paste your URL and it parses your HTML, discovers every third-party script, and checks each one's presence and file type on a schedule. No DevTools, no manual audits, no code to add to your site.
Add your site to Sitewatch and every monitoring cycle re-discovers and re-checks all external scripts referenced in your HTML. Because vendors change endpoints and have outages without warning, continuous checks are the only reliable way to catch a script that worked yesterday and 404s today. Intervals are configurable per site, from every 30 minutes on Free to every 5 minutes on Pro.
When an external script goes missing, errors, arrives as something other than code, or redirects to an unexpected destination, the browser stops executing it — and whatever feature depended on it silently breaks. Sitewatch confirms the failure with 2-of-3 retries to filter transient blips, then raises an incident naming the script, what came back instead of it, and the page it affects.
Yes. Analytics tags (Google Analytics, Segment, Mixpanel) and chat widgets (Intercom, Drift, Zendesk) are loaded as external scripts, so they fall directly inside Sitewatch's coverage. If the analytics script starts 404ing and your data goes dark, or the chat widget script fails to load and support messages stop arriving, Sitewatch catches the failed request even though the page itself still looks fine.
Yes. A third-party script referenced over http:// on an https:// page is mixed content, and browsers block it outright — the feature it powers disappears with no error visible to you. Sitewatch flags insecure references and protocol issues; see mixed-content monitoring for the dedicated protocol-level checks that pair with per-script monitoring.
Yes. When an individual script file errors, per-script monitoring catches it. When an entire vendor domain goes dark — DNS failure, expired cert, total outage — third-party dependency monitoring catches it at the domain level. Either way, you get an alert across your configured channels (6 channels including Slack, email, and PagerDuty) before your customers tell you.
Sitewatch monitors every external script referenced in your page HTML -- analytics (Google Analytics, Segment, Mixpanel), payment forms (Stripe, PayPal), chat widgets (Intercom, Drift), ad tags, tag managers, and any other third-party JavaScript. Scripts are discovered automatically by parsing the HTML.
No. Sitewatch checks that each script is there and is really code -- verifying that it loads and arrives correctly as JavaScript. It does not download, hash, or compare script contents between checks. It catches availability failures and delivery errors, not content-level changes.
Sitewatch detects scripts that go missing or error, scripts that arrive as the wrong kind of file (for example, a CDN serving text/html instead of application/javascript), and scripts that have been removed or relocated. Detecting these failures is part of Sitewatch's 20 detection rules covering the full range of failures that leave a page loading but broken.
When Stripe.js (or any script) errors or arrives as the wrong kind of file, Sitewatch confirms the failure with 2-of-3 retries and sends an alert across your configured channels -- 6 channels including Slack, email, and PagerDuty. The alert includes the script URL, HTTP status code, and which page is affected.
No. Sitewatch monitors your pages externally using HTTP requests. It discovers and checks all scripts automatically by parsing the HTML -- no code changes, no tags to install, no vendor integrations required.
10Explore more