Every uptime tool asks the same setup question — check every 1 minute? 5? 15? — and most people answer with a shrug, because nobody's told them what the number actually controls. Here's what it controls: the floor under your detection time. Whatever your on-call heroics, whatever your alerting stack, an outage cannot be noticed faster than the next check. Choose 15 minutes and you have chosen, permanently, that some outages get a 15-minute head start.

This guide is the missing reasoning: the simple math of detection delay, where the interval stops mattering, how frequency interacts with false alarms (the relationship is friendlier than you'd think), and a tiering strategy that puts fast checks where they pay.

The math: interval sets your detection floor

Outages start at random moments between checks, so the average wait before the first failed check is half the interval. Add a confirmation check (most good monitors require a second consecutive failure before alerting — see below) and the practical formula is:

Average detection delay ≈ interval ÷ 2 + (confirmation checks × interval)

  • 1-minute checks, 1 confirmation: ~1.5–2 minutes to alert. Worst case ~2 min.
  • 3-minute checks, alert on first failure: ~1.5 minutes average, worst case 3.
  • 5-minute checks, 1 confirmation: ~7.5 minutes average.
  • 15-minute checks: ~7.5–22 minutes depending on policy — long enough that customers routinely beat your monitoring to the news.

Everything downstream sits on this floor. Your MTTR includes it; your SLA math absorbs it (a 99.9% monthly budget is 43 minutes — a 15-minute detection floor spends a third of the budget on noticing); your nines quietly depend on it. Detection is the one phase of incident response you can buy outright, and it's cheap.

Where the interval stops mattering

The gains are steeply front-loaded. 15 minutes → 5 minutes: saves ~15 minutes of average detection. 5 → 1: saves ~5 more. 1 minute → 15 seconds: saves ~45 seconds — which only matters if something automated acts on the alert, because a human pager path (notify → wake → acknowledge → look) consumes minutes regardless. That's the honest case for and against sub-minute checking: if your alert triggers failover automation or you genuinely lose four figures a second, buy it (that's UptimeRobot Scale and enterprise-tier territory, at 5–15× the price); if your alert wakes a person, 1-minute checks already saturate what the person can use. CronAlert's ceiling is deliberately 1 minute on every paid plan — past that point you're paying for latency your response can't consume.

Frequency and false positives: a package deal

The standard worry — "won't checking more often page me over every network blip?" — has the relationship backwards. Blips are caught by checks at any frequency; what suppresses the noise is verification, and verification is cheap exactly when checks are frequent. Requiring two consecutive failures costs one extra interval of delay: one minute at 1-minute checks, a quarter-hour at 15-minute checks. Slow intervals are why some tools alert on first failure and generate the 3 AM false alarms that give the category a bad name; fast intervals make patience affordable. CronAlert bakes this in — the failure threshold defaults to 2 consecutive checks at 1-minute intervals and immediate alerting at 3 minutes and slower — and multi-region quorum (Team+) eliminates the single-vantage-point blip class entirely. The wider topic has its own guide: reducing false positive alerts.

Tier your monitors — the checkout isn't the changelog

Uniform intervals overspend on trivia and underspend on the money path. A working tiering:

  • Tier 1 — fastest interval (1 min): checkout/payment, public API, login/auth, the health endpoint behind your SLA. Minutes here are revenue and reputation.
  • Tier 2 — moderate (3–5 min): the homepage and key landing pages, dashboards, docs. Users notice outages; four dark minutes don't make the retro.
  • Tier 3 — relaxed (15–60 min): internal tools, staging (yes, monitor staging), the marketing microsite. You want to know today, not this second. CronAlert's free plan offers 5- through 60-minute options alongside the 3-minute default for exactly this.
  • Not interval-based at all: SSL expiry (changes daily at most, checked alongside HTTP), and heartbeats, whose cadence is the job's schedule, not a polling choice.

On CronAlert the interval floor is plan-wide (3 minutes free, 1 minute on paid plans) but every monitor can be set slower — so tiering costs nothing and buys signal: when a Tier 1 monitor fires, everyone knows it matters.

Decide in three questions

  • What does a minute of downtime cost on this endpoint? Real money or SLA exposure → Tier 1. Embarrassment → Tier 2. A shrug → Tier 3.
  • Who or what responds to the alert? Automation → consider sub-minute (elsewhere) honestly. A paged human → 1 minute saturates the value.
  • What's the verification policy? Whatever interval you pick, pair it with consecutive-failure confirmation or multi-region quorum so speed doesn't become noise.

For most teams the resulting answer is boring and correct: 1-minute checks on the handful of endpoints that matter (the jump from free's 3-minute floor is most of why Pro at $5/mo exists), the free-tier default on everything else, and heartbeats on the scheduled work no interval can see.

Frequently asked questions

Is a 5-minute check interval good enough?

For content sites and internal tools, yes. For revenue paths and SLA-backed APIs, the ~7-minute average detection delay it implies is the bottleneck no on-call process can recover.

How does check frequency affect detection time?

Average delay ≈ half the interval, plus one interval per confirmation check. It's a hard floor under MTTR and SLA math.

Do I need 15- or 30-second checks?

Only if automation consumes the alert. Human response times make 1-minute checks the practical saturation point — and sub-minute tiers cost 5–15× more.

Do frequent checks cause more false positives?

The opposite, in practice: frequency makes consecutive-failure verification cheap, which is what actually kills false alarms. Slow intervals force alert-on-first-failure and its noise.

Should every monitor use the same interval?

No — tier by cost-of-downtime: 1-minute on money paths, relaxed on trivia, and heartbeats (schedule-based, not interval-based) on cron jobs.

Buy the floor, then stop paying

Detection speed is the rare reliability metric you can simply purchase: pick the interval, get the floor. Create a free CronAlert account — 25 monitors at 3-minute checks with smart verification defaults — and move your two or three money-path monitors to 1-minute checks with Pro at $5/mo when the math above says it's worth five dollars. (It almost always does, and rarely more.)

Related reading: what is uptime monitoring, setting up uptime monitoring in 5 minutes, calculating uptime percentage, setting timeout and response-time thresholds, reducing false positive alerts, and testing your alerts with a fire drill.