Black Friday compresses a strange amount of risk into one weekend: your site handles several times its normal traffic on exactly the days each minute of downtime costs the most. The same math applies to any peak you can see coming — a product launch, a ticket on-sale, enrollment opening — and the good news about a peak you can see coming is that the date is on the calendar. You can work backwards from it.
One honest scoping note before the checklist: monitoring doesn't keep the site up — it compresses detection. Whether you survive the load is decided by the capacity and load-testing work done weeks earlier. What monitoring changes is the gap between "checkout broke" and "the right person knows": from twenty angry-customer minutes to about ninety seconds. On a day earning a month of revenue, that gap is money. This checklist covers the detection half, dated so you can put each block on the calendar.
Four weeks out: cover the money path
- Monitor every step a buyer walks through. Home, a category page, a product page, cart, and checkout — each is a separate failure domain that can break alone. The classic peak-day incident is a homepage that's fine and a checkout that isn't; a homepage-only monitor watches the wrong thing.
- Monitor the APIs behind the pages. If cart and checkout are client-rendered, the pages can 200 while the APIs behind them fail — put monitors on the endpoints directly, the same inversion as any e-commerce monitoring setup.
- Add your third parties. Payments, shipping rates, tax, transactional email — monitor the dependencies that can kill checkout without touching your servers. They're under peak load the same day you are.
- Add keyword checks on the pages that must be right, not just up. A checkout page that renders with a broken payment widget, or a promo page missing its products, is a 200 that costs money — a keyword check asserting on content that only a working page renders catches it.
- Load test now, while there's still time to act on what it finds. Four weeks converts findings into fixes; four days converts them into anxiety.
Two weeks out: tune the detection
- Tighten check intervals to 1 minute on the money path. At 5-minute intervals, worst-case detection plus confirmation can approach ten minutes — an eternity at peak revenue rates. The detection-floor math is unforgiving here.
- Re-baseline your response-time thresholds. This is the step everyone skips: thresholds tuned against quiet-season latency will fire all day under peak load, and by 10 AM your team will have learned to ignore alerts — on the one day that habit is fatal. Set peak-day thresholds from your load test's latency numbers, not from October's.
- Decide the degraded-vs-down line now. Slow-but-working is a different response than down (watch, don't panic); write down which pages get which treatment so nobody's inventing policy at 2 PM Friday. Alert fatigue during a peak event isn't an annoyance, it's a detection failure.
- If you're on a multi-instance or multi-region setup, confirm your multi-region checks are quorum-based so one probe's bad path doesn't page you during the event.
One week out: test the humans
- Fire-drill the alerts. Channel test buttons first, then one end-to-end drill: break a staging monitor and confirm the alert reaches a human who acknowledges it. Alert paths rot — archived Slack channels, spam-foldered emails, departed teammates still on the routing — and the week before the event is when you find out cheaply.
- Publish the coverage plan. Who's watching during the event, who's second, and how escalation works — even a two-person shop benefits from writing it down. The small-team on-call guide has lightweight patterns.
- Prep the status page. A peak-day incident generates support tickets at peak rate too; a status page is the ticket-deflection valve, and it needs to exist before the incident. Components named for what buyers experience, and a bookmark to it in your support macros — best practices here.
- Declare the change freeze — the date after which only emergency fixes deploy. Most self-inflicted peak-day outages are deploys that couldn't wait.
The day before: verify, don't build
- Check certificate expiry dates on every domain in the money path — an SSL expiry mid-event is a fully preventable catastrophe, and renewal infrastructure has its own silent failure modes.
- Walk the dashboard once. Every money-path monitor green, every threshold at its peak-day value, every alert channel pointing at a live human.
- Schedule maintenance windows for any deploy you can't avoid, so your own rollout doesn't page the team — checks resume automatically when the window closes.
During: watch the trend, don't touch the dials
- Response-time trend is your early warning. Sites rarely go from fine to down; they get slow first. A climbing trend on checkout is the cue to shed load or scale before the timeout threshold becomes an outage.
- Don't tune monitoring mid-event. Loosening a threshold because it keeps firing is how the real outage gets missed — the tuning decision was made calmly two weeks ago; trust it.
- When something does break: status page first (it's the pressure valve), then fix. The small-team incident response guide covers the sequence.
After: harvest the data
- Revert the temporary settings — peak-day thresholds left in place become next month's missed slowness.
- Run a short review of every alert that fired: real, false, or ignored? Each ignored one is a tuning bug. A blameless postmortem for anything that actually broke.
- Pull the uptime report for the event window — stakeholders love it, and it's the baseline you'll plan next year's peak against.
Frequently asked questions
How do I prepare my site's uptime for Black Friday?
Work backwards: monitors on the money path and third parties at T-4 weeks, intervals and thresholds tuned at T-2, alerts fire-drilled and status page prepped at T-1, change freeze and hands-off discipline during.
Does monitoring prevent crashes under load?
No — load testing and capacity work do. Monitoring compresses detection from angry-customer minutes to about ninety seconds, which is what saves the sale when something does break.
Should I change monitoring during the spike?
No, except planned maintenance windows around unavoidable deploys. Mid-event tuning under pressure is how real outages get missed.
What should I monitor besides my own site?
Payments, shipping, tax, email, CDN — the providers who can break your checkout from their side, on the day they're under peak load too.
The date is on the calendar — use it
Most monitoring is set up after the incident it would have caught. A visible peak is the rare chance to do it in the right order. The whole money-path starter set fits CronAlert's free plan (25 monitors, 3-minute checks); the peak-day upgrades — 1-minute intervals, keyword checks, maintenance windows — are Pro at $5/mo. Set it up this week, put the checklist dates on the calendar, and spend the event watching a green dashboard instead of your support inbox.
Related reading: e-commerce uptime monitoring, calculating the cost of downtime, testing your alerts with a fire drill, and monitoring Stripe, Twilio, and AWS.