Know the moment anything changes on your Linux infrastructure.
WatchForge watches your critical paths — /etc, /usr/bin,
production code, database dumps — and streams every change to your dashboard
in seconds, with the process that made it. Built for teams who
treat file integrity as an incident signal, not a compliance checkbox.
One agent per host. One dashboard. Your data, your infrastructure.
Deploy the agent
Single static binary on each host. Define what to watch, what to ignore. Starts monitoring within seconds of installation.
Events stream to your server
Every change — create, modify, delete, rename — is captured with full context: path, process, user, hash before and after. Mutual TLS end to end. Buffers locally if the server is unreachable.
See it live
Filter, search, acknowledge. Silent agents trip a critical alert within minutes — we assume tamper, not trust. Self-hosted, so your audit trail never leaves your perimeter.
Linux today. Windows and macOS agents after GA. Licensed under BSL 1.1.
Early access for teams who want to help shape it.
We're preparing a private beta for Linux-heavy infrastructures: self-hosted, small fleets (10–200 agents), teams comfortable running pre-1.0 software and giving direct feedback. No commitment, no spam.
Prefer email? Write to beta@watchforge.io