Status Page vs Incident Page: What Is the Difference?

Separate the always-on health page from the timeline for one specific outage.

Status page vs incident page explained: one shows always-on service health, the other is the timeline for a single outage. When to use each and how they work together.

By H. Marcell, Freelance Software Developer

Updated July 17, 2026

H. Marcell is a freelance software developer who builds and runs web services and APIs, and writes about uptime monitoring, incident response, and status-page communication.

What this guide covers

People use "status page" and "incident page" interchangeably, but they do different jobs. This guide draws the line: the status page is the always-on view of whether your services are healthy right now; the incident page is the focused, time-ordered record of one specific outage. Understanding the difference keeps your public communication easy to scan.

  • The status page answers "is it working right now?"
  • The incident page carries the detailed timeline of one outage.
  • Mixing the two makes the public page harder to scan.

Two jobs, two audiences

The status page serves the customer who wants a fast yes/no on whether a service works — they glance, get their answer, and leave. The incident page (or incident timeline) serves the customer who is actively affected and wants to follow along: what happened, what you are doing, and how it progressed. The same person may want both at different moments, which is why the two live together but stay visually distinct.

How they work together

In practice, the status page is the front door and the incident timeline is the story behind a specific door that is currently red. A component shows "degraded"; clicking through reveals the incident with its chronological updates. Keeping component state and incident narrative separate lets each do its job: the component answers "now," the timeline answers "what is going on."

How Sandglass supports the practice

Use the Sandglass status page for live component state, backed by checks, so it is always current. When an incident occurs, its updates attach to that incident as a timeline — investigating, identified, monitoring, resolved — without cluttering the at-a-glance component view that customers rely on for a quick answer.

  • Back the practices here with HTTP, ping, TCP, content, SSL certificate, and heartbeat checks.
  • Route incidents to email, Slack webhook channels, and generic webhooks so the right people respond fast.
  • Use a public status page to keep customers informed while the team works the incident.

Common mistakes to avoid

Combining every investigation note into the public status page makes it harder to scan when users only need current availability. The person checking "is checkout down?" should get that answer in one glance, not have to read through a running log of engineering hypotheses.

Implementation checklist

Step 1: Start from customer impact

Decide which failures in this topic actually reach customers before adding any monitoring.

Step 2: Choose one signal per risk

Match each risk to a single HTTP, content, TCP, SSL certificate, or heartbeat check instead of stacking duplicates.

Step 3: Assign an owner and a channel

Give each alert one owner and one destination — email, a Slack webhook, or a generic webhook.

Step 4: Review after real incidents

Revisit intervals, thresholds, and ownership once a real incident shows what was missing.

Frequently Asked Questions

Monitor status page vs incident page: what is the difference? with Sandglass

Start free

Free plan, no credit card required.