94 Alert Types · 5 Categories

Every failure mode.
Pre-mapped.

We've categorized every way AI-generated apps fail in production so you don't have to learn the hard way.

Security Types

Performance Types

Cost Types

Usage Types

Security — 33 Alert Types

Threats, intrusions, and vulnerability signals across your app's entire attack surface. AI coding agents frequently introduce auth gaps, injection vulnerabilities, and configuration exposures that standard monitoring misses.

Key	Alert	Severity	Description
brute_force_login	Brute Force Login	CRITICAL	Repeated failed login attempts from the same IP or user agent
account_takeover	Account Takeover	EMERGENCY	Successful login from unexpected geography or device fingerprint
privilege_escalation	Privilege Escalation	CRITICAL	User accessing resources beyond their assigned role
jwt_anomaly	JWT Anomaly	WARNING	Malformed, expired, or signature-invalid JWT in a protected route
password_reset_abuse	Password Reset Abuse	WARNING	High volume of password reset requests for the same account
impossible_travel	Impossible Travel	CRITICAL	Auth events from two geographically impossible locations in short window
concurrent_sessions_anomaly	Concurrent Sessions	WARNING	Same user authenticated from unusually many devices simultaneously

Key	Alert	Severity	Description
sql_injection	SQL Injection	CRITICAL	SQL injection pattern detected in query parameters or body
nosql_injection	NoSQL Injection	CRITICAL	MongoDB operator injection or similar NoSQL attack pattern
xss_attempt	XSS Attempt	WARNING	Cross-site scripting payload detected in user input
command_injection	Command Injection	CRITICAL	Shell command injection in user-controlled input
path_traversal	Path Traversal	CRITICAL	Directory traversal attempt via ../../../ patterns
ssti_detected	Template Injection	CRITICAL	Server-side template injection in rendered content
prompt_injection	Prompt Injection	CRITICAL	Adversarial prompt detected attempting to hijack LLM behavior

Key	Alert	Severity	Description
api_key_in_url	API Key in URL	CRITICAL	API key or secret found in request URL path or query string
secret_in_response	Secret in Response	CRITICAL	High-entropy secret or API key pattern in API response body
env_var_leak	Env Var Leak	CRITICAL	Environment variable name/value pattern in response
insecure_db_url	Database URL Exposed	CRITICAL	Database connection string transmitted in request or response
stack_trace_leaked	Stack Trace Leaked	WARNING	Full stack trace or internal path exposed in error response
pii_in_logs	PII in Logs	WARNING	Personally identifiable information detected in log streams

Key	Alert	Severity	Description
cors_misconfiguration	CORS Misconfiguration	WARNING	Wildcard or overly permissive CORS policy detected
debug_endpoint_exposed	Debug Endpoint Exposed	CRITICAL	Debug, admin, or development endpoint reachable in production
missing_auth_on_route	Missing Auth on Route	CRITICAL	Sensitive endpoint accessible without authentication
no_rate_limit_on_auth	No Rate Limit on Auth	WARNING	Authentication endpoints with no rate limiting detected
graphql_introspection_live	GraphQL Introspection Live	WARNING	GraphQL schema introspection enabled in production environment

Key	Alert	Severity	Description
idor_detected	IDOR Detected	CRITICAL	Insecure direct object reference — accessing other users' resources
mass_assignment	Mass Assignment	CRITICAL	Bulk write to unintended fields via insufficiently filtered input
enumeration_attack	Enumeration Attack	WARNING	Sequential ID or username enumeration pattern detected
rate_limit_bypass	Rate Limit Bypass	WARNING	Requests evading rate limits via header manipulation or rotation
data_export_anomaly	Data Export Anomaly	CRITICAL	Unusually large data download suggesting exfiltration

Key	Alert	Severity	Description
api_key_rotation_overdue	Key Rotation Overdue	WARNING	API key has not been rotated within the configured policy window
orphaned_api_key	Orphaned API Key	WARNING	API key still active for a deprovisioned user or deleted application
webhook_secret_missing	Webhook Secret Missing	WARNING	Webhook endpoint configured without signature verification

Key	Alert	Severity	Description
bot_traffic	Bot Traffic Spike	WARNING	Unusual ratio of automated vs. human traffic detected
scan_fuzzing_pattern	Scan / Fuzzing	WARNING	Systematic endpoint scanning or fuzzing pattern across many routes
ddos_signature	DDoS Signature	CRITICAL	Traffic volume and pattern consistent with distributed denial of service

Performance — 15 Alert Types

Real-time detection of latency spikes, resource exhaustion, and infrastructure degradation before users start complaining.

Key	Alert	Severity	Metric	Description
latency_spike	Latency Spike	WARNING	ms	p95/p99 response time exceeds configured threshold
error_rate_spike	Error Rate Spike	CRITICAL	errors/min	5xx error rate above acceptable baseline
throughput_drop	Throughput Drop	WARNING	req/min	Requests per minute falls significantly below normal baseline
memory_pressure	Memory Pressure	WARNING	% used	Memory utilization approaching container or instance limit
cpu_saturation	CPU Saturation	WARNING	% used	Sustained CPU usage above threshold impacting response times
connection_pool_exhausted	Connection Pool Exhausted	CRITICAL	pool %	Database or HTTP connection pool at capacity — new requests queuing
queue_depth_critical	Queue Depth Critical	CRITICAL	messages	Job queue backlog growing beyond processing capacity
dead_letter_queue_growing	Dead Letter Queue Growing	WARNING	messages	Failed messages accumulating in dead letter queue
worker_crash_loop	Worker Crash Loop	CRITICAL	restarts	Worker or container restarting repeatedly due to failures
cache_miss_rate_high	Cache Miss Rate High	INFO	% miss	Cache effectiveness degraded — more DB load than expected
third_party_api_slow	Third-Party API Slow	WARNING	ms	External dependency responding slower than SLA threshold
traffic_drop	Traffic Drop	WARNING	req/min	Sudden traffic drop may indicate outage or routing failure
deploy_health_check_failed	Deploy Health Check Failed	CRITICAL	—	New deployment failing health checks after rollout
schema_migration_failure	Schema Migration Failed	CRITICAL	—	Database migration script failed or rolled back
scheduled_job_missed	Scheduled Job Missed	WARNING	—	Cron job or scheduled task did not execute at expected time

Cost Management — 12 Alert Types

Catch infinite loops, runaway scripts, and unmetered AI endpoints before they drain your card overnight.

Key	Alert	Severity	Description
llm_spend_rate_high	LLM Spend Rate High	CRITICAL	AI API spend rate ($/hr) exceeds your configured threshold
unmetered_llm_endpoint	Unmetered LLM Endpoint	CRITICAL	AI endpoint accessible without authentication or quota controls
llm_context_window_abuse	Context Window Abuse	WARNING	Requests sending unusually large context, inflating per-call costs
ai_endpoint_hammering	AI Endpoint Hammering	CRITICAL	Abnormally high request rate to AI provider endpoints
infra_cost_spike	Infrastructure Cost Spike	WARNING	Cloud provider cost anomaly detected vs. rolling 7-day baseline
third_party_api_overrun	Third-Party API Overrun	WARNING	External API quota or budget threshold exceeded
unusual_bandwidth_usage	Unusual Bandwidth	WARNING	Egress bandwidth significantly above expected baseline
autoscale_runaway	Autoscale Runaway	CRITICAL	Auto-scaling triggered repeatedly in a short window — cost explosion risk
storage_expansion_alert	Storage Expansion	WARNING	Storage usage growing abnormally fast or approaching quota
database_write_volume_spike	DB Write Volume Spike	WARNING	Database write operations significantly above normal rate
cdn_cost_spike	CDN Cost Spike	INFO	CDN egress costs trending significantly upward
log_volume_spike	Log Volume Spike	INFO	Log ingestion volume spike — potential infinite loop or error storm

Activity & Usage — 23 Alert Types

Monitor user behavior, data integrity signals, and AI code quality metrics.

traffic_spike_unexpected, traffic_drop_significant, geographic_traffic_anomaly, new_endpoint_high_traffic, api_version_adoption_shift

churn_signal, session_length_anomaly, feature_abandonment_spike, bulk_operation_anomaly, new_user_flow_breaking, onboarding_funnel_drop

duplicate_record_creation, orphaned_records_accumulating, referential_integrity_violation, schema_drift_detected, unexpected_null_values

mcp_tool_call_failure, mcp_context_overflow, agent_loop_detected, hallucinated_endpoint_called

webhook_delivery_failure, third_party_integration_error, oauth_token_expiring

Errors & Exceptions — 11 Alert Types

Runtime crashes and integration failures that silently break production without any visible error page.

Key	Alert	Severity	Description
unhandled_exception	Unhandled Exception	CRITICAL	Unhandled exception causing request failure or process crash
null_reference_error	Null Reference Error	CRITICAL	Null/undefined dereference — common in AI-generated code without validation
type_error_production	Type Error in Production	WARNING	Runtime type mismatch in production code path
oom_crash	OOM Crash	CRITICAL	Process killed by out-of-memory signal
uncaught_promise_rejection	Uncaught Promise	CRITICAL	Unhandled Promise rejection causing silent failure
max_call_stack_exceeded	Stack Overflow	CRITICAL	Maximum call stack size exceeded — infinite recursion

Key	Alert	Severity	Description
database_connection_failed	Database Connection Failed	CRITICAL	Unable to establish connection to database
external_service_down	External Service Down	CRITICAL	Critical third-party service returning errors or timing out
email_service_failure	Email Service Failure	WARNING	Transactional email delivery failures above threshold
storage_write_failure	Storage Write Failure	CRITICAL	File or object storage write operations failing
payment_gateway_error	Payment Gateway Error	CRITICAL	Payment processing failures beyond normal decline rates