OneUptime Due Diligence
Run due diligence on OneUptime: check compliance and get alerts when suppliers change.
United States · oneuptime.com · 20 vendors
OneUptime, developed by HackerBay, Inc., is an open-source observability platform that unifies monitoring, incident management, status pages, and reliability automation. It provides integrated tools for website monitoring, error tracking, application performance monitoring (APM), log ingestion, and AI-powered debugging. The platform helps software teams detect, debug, and resolve issues faster to reduce downtime and maintain system reliability across cloud-native and enterprise environments.
Resilience scores
- Digital Sovereignty: 85
- Digital Resilience: 8
- Financial Resilience: 5
Technology vendors
- Bugsnag — Technology — United States
- Docker, Inc. — Technology — United States
- Grafana Labs — Technology — United States
- and 18 more
Services catalogue
4 services in catalogue across 3 categories; runs on 20 sub-vendors.
- Uptime Monitoring
- Personal Data Processing
- Monitoring & Status Page
Insights
Last updated 2026-07-29 · revision 6
20 direct vendors, 216 subvendors
Direct vendors by controlling owner country (sample)
- United States: 17
- France: 2
- Sweden: 1
Subvendors by controlling owner country (sample)
- Germany: 3
- Romania: 1
- Singapore: 1
Compliance
8 in-scope frameworks identified; showing 3.
CSA STAR — No public evidence
Evidence: https://oneuptime.com/legal/csa-star, https://oneuptime.com/legal/iso-27001
CPRA — Evidence found
Evidence: https://oneuptime.com/legal/ccpa, https://oneuptime.com/legal/gdpr, https://oneuptime.com/legal/privacy
ISO 27001 (source) — Evidence found
Evidence: https://oneuptime.com/legal/iso-27001, https://oneuptime.com/legal/iso-27017, https://oneuptime.com/legal/iso-27018, https://oneuptime.com/legal/data-residency, https://oneuptime.com
Financials
Three-year financials
- null:
- null:
- null:
Financial Resilience Score: 5/10
OneUptime (HackerBay, Inc.) is a privately held U.S. open-source observability company with no public financial disclosures. Revenue, EBIT, equity, and headcount figures are not available from primary sources, making a rigorous quantitative assessment impossible. Qualitatively, the company shows positive signals: a broad product suite (~26 products), strong open-source community traction (7,200+ GitHub stars, 112+ contributors, 37,000+ commits, 1M+ downloads), enterprise-grade certifications (SOC 2, ISO 27001/27017/27018, HIPAA), and a diversified customer roster including Mistral AI, Sodexo, ViewSonic, and Dotdash Meredith. The company appears capital-efficient with no publicly announced venture rounds, suggesting either bootstrapping or undisclosed private funding. However, significant risks temper the outlook: the observability market is highly competitive with well-capitalized incumbents (Datadog, New Relic, Grafana Labs, PagerDuty, Splunk, Dynatrace) and fast-growing rivals (Better Stack, Incident.io, Sentry). Open-source cannibalization is a real concern since the community edition offers the full feature set, potentially limiting paid conversion. Key-person dependency is notable, with two founders accounting for the majority of ~22,000 commits combined. AI/LLM cost exposure and a small team relative to competitors add further uncertainty. Absent financial transparency, a mid-range score reflects balanced qualitative strengths against unquantified risks.
Key strengths: Broad product suite of ~26 discrete observability products enabling cross-sell, Open-source distribution flywheel with 7,200+ GitHub stars, 112+ contributors, 1M+ downloads, Enterprise credentials: SOC 2, ISO 27001/27017/27018, HIPAA-capable deployments, Diversified enterprise customer base (Mistral AI, Sodexo, Dotdash Meredith, ViewSonic, Aareon), Capital-efficient posture with no publicly announced venture rounds, Remote-first, globally distributed operating model
Risk factors: Zero public financial transparency — no audited financials, runway, or margin visibility, Highly competitive market vs. Datadog, New Relic, Grafana Labs, PagerDuty, Splunk, Dynatrace, Open-source cannibalization risk since community edition includes full feature set, AI/LLM cost exposure tied to token economics of the AI agent feature, Small team relative to competitors — scale-up risk if enterprise pipeline accelerates, Key-person concentration: two founders account for majority of ~22,000 commits, No publicly announced funding rounds — limited firepower if bootstrapped
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.