Production domain root URL
Always monitor the apex (e.g. https://example.com) as the canonical health check — it should always 200 and render the homepage. Set up your monitor to follow redirects so a misconfigured naked-to-www redirect doesn't fire as a false positive.
Critical API endpoints
If you have a public API or critical webhook handler (Stripe, GitHub, Polar) running as a Vercel Function, monitor that route directly. Cold starts can spike response time after long idle periods — watch the trend.
Authentication entry points
Monitor /login or /api/auth/session — a misconfigured auth provider often returns 200 on the homepage but breaks sign-in. We've seen this happen after a Better Auth or NextAuth env var rotation.