Black Friday compresses a strange amount of risk into one weekend: your site handles several times its normal traffic on exactly the days each minute of downtime costs the most. The same math applies to any peak you can see coming — a product launch, a ticket on-sale, enrollment opening — and the good news about a peak you can see coming is that the date is on the calendar. You can work backwards from it.

One honest scoping note before the checklist: monitoring doesn't keep the site up — it compresses detection. Whether you survive the load is decided by the capacity and load-testing work done weeks earlier. What monitoring changes is the gap between "checkout broke" and "the right person knows": from twenty angry-customer minutes to about ninety seconds. On a day earning a month of revenue, that gap is money. This checklist covers the detection half, dated so you can put each block on the calendar.

Four weeks out: cover the money path

  • Monitor every step a buyer walks through. Home, a category page, a product page, cart, and checkout — each is a separate failure domain that can break alone. The classic peak-day incident is a homepage that's fine and a checkout that isn't; a homepage-only monitor watches the wrong thing.
  • Monitor the APIs behind the pages. If cart and checkout are client-rendered, the pages can 200 while the APIs behind them fail — put monitors on the endpoints directly, the same inversion as any e-commerce monitoring setup.
  • Add your third parties. Payments, shipping rates, tax, transactional email — monitor the dependencies that can kill checkout without touching your servers. They're under peak load the same day you are.
  • Add keyword checks on the pages that must be right, not just up. A checkout page that renders with a broken payment widget, or a promo page missing its products, is a 200 that costs money — a keyword check asserting on content that only a working page renders catches it.
  • Load test now, while there's still time to act on what it finds. Four weeks converts findings into fixes; four days converts them into anxiety.

Two weeks out: tune the detection

  • Tighten check intervals to 1 minute on the money path. At 5-minute intervals, worst-case detection plus confirmation can approach ten minutes — an eternity at peak revenue rates. The detection-floor math is unforgiving here.
  • Re-baseline your response-time thresholds. This is the step everyone skips: thresholds tuned against quiet-season latency will fire all day under peak load, and by 10 AM your team will have learned to ignore alerts — on the one day that habit is fatal. Set peak-day thresholds from your load test's latency numbers, not from October's.
  • Decide the degraded-vs-down line now. Slow-but-working is a different response than down (watch, don't panic); write down which pages get which treatment so nobody's inventing policy at 2 PM Friday. Alert fatigue during a peak event isn't an annoyance, it's a detection failure.
  • If you're on a multi-instance or multi-region setup, confirm your multi-region checks are quorum-based so one probe's bad path doesn't page you during the event.

One week out: test the humans

  • Fire-drill the alerts. Channel test buttons first, then one end-to-end drill: break a staging monitor and confirm the alert reaches a human who acknowledges it. Alert paths rot — archived Slack channels, spam-foldered emails, departed teammates still on the routing — and the week before the event is when you find out cheaply.
  • Publish the coverage plan. Who's watching during the event, who's second, and how escalation works — even a two-person shop benefits from writing it down. The small-team on-call guide has lightweight patterns.
  • Prep the status page. A peak-day incident generates support tickets at peak rate too; a status page is the ticket-deflection valve, and it needs to exist before the incident. Components named for what buyers experience, and a bookmark to it in your support macros — best practices here.
  • Declare the change freeze — the date after which only emergency fixes deploy. Most self-inflicted peak-day outages are deploys that couldn't wait.

The day before: verify, don't build

  • Check certificate expiry dates on every domain in the money path — an SSL expiry mid-event is a fully preventable catastrophe, and renewal infrastructure has its own silent failure modes.
  • Walk the dashboard once. Every money-path monitor green, every threshold at its peak-day value, every alert channel pointing at a live human.
  • Schedule maintenance windows for any deploy you can't avoid, so your own rollout doesn't page the team — checks resume automatically when the window closes.

During: watch the trend, don't touch the dials

  • Response-time trend is your early warning. Sites rarely go from fine to down; they get slow first. A climbing trend on checkout is the cue to shed load or scale before the timeout threshold becomes an outage.
  • Don't tune monitoring mid-event. Loosening a threshold because it keeps firing is how the real outage gets missed — the tuning decision was made calmly two weeks ago; trust it.
  • When something does break: status page first (it's the pressure valve), then fix. The small-team incident response guide covers the sequence.

After: harvest the data

  • Revert the temporary settings — peak-day thresholds left in place become next month's missed slowness.
  • Run a short review of every alert that fired: real, false, or ignored? Each ignored one is a tuning bug. A blameless postmortem for anything that actually broke.
  • Pull the uptime report for the event window — stakeholders love it, and it's the baseline you'll plan next year's peak against.

Frequently asked questions

How do I prepare my site's uptime for Black Friday?

Work backwards: monitors on the money path and third parties at T-4 weeks, intervals and thresholds tuned at T-2, alerts fire-drilled and status page prepped at T-1, change freeze and hands-off discipline during.

Does monitoring prevent crashes under load?

No — load testing and capacity work do. Monitoring compresses detection from angry-customer minutes to about ninety seconds, which is what saves the sale when something does break.

Should I change monitoring during the spike?

No, except planned maintenance windows around unavoidable deploys. Mid-event tuning under pressure is how real outages get missed.

What should I monitor besides my own site?

Payments, shipping, tax, email, CDN — the providers who can break your checkout from their side, on the day they're under peak load too.

The date is on the calendar — use it

Most monitoring is set up after the incident it would have caught. A visible peak is the rare chance to do it in the right order. The whole money-path starter set fits CronAlert's free plan (25 monitors, 3-minute checks); the peak-day upgrades — 1-minute intervals, keyword checks, maintenance windows — are Pro at $5/mo. Set it up this week, put the checklist dates on the calendar, and spend the event watching a green dashboard instead of your support inbox.

Related reading: e-commerce uptime monitoring, calculating the cost of downtime, testing your alerts with a fire drill, and monitoring Stripe, Twilio, and AWS.