Features
Login AlertX monitors Windows and Linux login activity and sends real-time alerts. It runs as a background Windows service or Linux systemd daemon and divides functionality into a Free tier for essential monitoring, a Personal tier for advanced detection and media capture, a Business tier that adds team workspace integrations, and a Server tier for headless CLI monitoring and SSH alerts.
Free Plan
Core monitoring and notification features available indefinitely without a license.
Login Alerts
Sends an email notification automatically upon the first successful login of every session.
Email Setup (OAuth & SMTP)
Supports “Sign in with Google” for secure OAuth connections, or standard SMTP configuration for other email providers. No separate app accounts are required.
Background Service
Installs as a Windows service that starts before any user logs in. Runs invisibly in the background without requiring manual activation.
Local Encrypted Storage
Encrypts sensitive configuration data and email credentials locally using Windows Data Protection API (DPAPI). Data is not uploaded to external servers.
System Tray Access
Manages settings and views local login history directly from the Windows system tray. Does not clutter the desktop or taskbar.
Personal Plan
Advanced detection, additional notification channels, and media capture. Includes a 30-day free trial without requiring a credit card.
AI Risk Detection
Uses an ensemble machine learning engine to learn your normal login patterns and assigns a Risk Score (0–1) to every login, shown as Low, Medium, or High. Automatically flags rapid repeated login attempts as potential brute-force activity, and flags logins from accounts inactive for an extended period.
RDP Monitoring
Tracks Remote Desktop Protocol (RDP) connections. Alerts include the source IP address and approximate geolocation of the remote user.
WhatsApp & Push Alerts
Routes login notifications to a mobile device via WhatsApp messaging or direct push notifications through the mobile companion app. Personal plan supports up to 5 linked devices.
Telegram & Discord Alerts
Sends login alerts directly to a Telegram chat or a Discord channel — a lightweight alternative to email or WhatsApp for users already active on these platforms.
Webcam Capture
Silently takes a photo from a selected webcam (or all connected webcams) at the exact moment the login occurs.
Screenshot Capture
Automatically captures and attaches an image of the active display to the alert, showing exactly what the desktop looked like upon login.
Audio Recording
Records up to 60 seconds of ambient audio from a selected microphone during the login process to capture environmental context.
Every Unlock Alert
Removes the “first-login-only” restriction. Sends an alert every time the Windows screen is unlocked or a user session switches.
System & Hardware Info
Appends active CPU usage, RAM, storage, GPU, and active network connections to the alert. Useful for auditing system state during access.
Notification Scheduling
Configures specific time windows for alerts (e.g., 10:00 PM to 8:00 AM). Prevents alert fatigue during standard working hours.
Business Plan
Includes everything in the Personal Plan, plus team workspace routing and a higher device limit for IT admins and shared environments.
Team Workspace Integrations
Sends alerts to Slack, Microsoft Teams, and Google Chat. These integrations are pre-built and configured with a one-click test connection — no manual webhook setup required.
Expanded Device Limit
Link up to 20 mobile devices to the companion app — four times the Personal plan’s limit — for teams and shared machines with multiple stakeholders.
Priority Support
Priority email support plus a dedicated Discord support channel, ahead of standard email support on the Personal plan.
Server Plan
Includes everything in the Business Plan, plus headless Linux daemon support, SSH monitoring, and the loginalertx Command Line Interface for infrastructure teams.
Command Line Interface (CLI)
Manage the background daemon, dispatch test alerts, and check real-time daemon status entirely from the terminal — no GUI required.
SSH & PAM Monitoring
Deep integration with Linux PAM and systemd journalctl to monitor SSH connections (key vs password), terminal TTY sessions, and sudo privilege elevations.
Native Packages
Distribute across your fleet easily via native .deb packages for Debian/Ubuntu or standalone tarballs for RHEL/Rocky distributions.
Feature Comparison
| Feature | Free | Personal | Business | Server |
|---|---|---|---|---|
| Email Alerts (First Login) | ||||
| RDP & SSH Monitoring | ||||
| Headless CLI / Linux Daemon | ||||
| Multi-User Tracking | ||||
| Background Windows Service | ||||
| Local SQLite Encryption | ||||
| AI Risk Detection & Anomaly Scoring | ||||
| WhatsApp & Push Notifications | ||||
| Telegram & Discord Alerts | ||||
| Slack, Microsoft Teams & Google Chat | ||||
| Webcam Photo Capture | ||||
| Desktop Screenshot Capture | ||||
| Microphone Audio Recording | ||||
| Every Unlock / Session Switch Alert | ||||
| Hardware & Network Info in Alerts | ||||
| Notification Scheduling | ||||
| Mobile Companion App Device Limit | — | Up to 5 | Up to 20 | Up to 20 |
| Server Installs Limit | — | — | — | Up to 3 |
General Information
Compatibility
Login AlertX v4.0 is fully cross-platform, supporting Windows 10/11 and major Linux distributions (Debian, Ubuntu, RHEL, Fedora, SUSE).
Privacy Architecture
Login history and config files are stored locally using AES-256 encrypted SQLite databases. Login AlertX has zero cloud storage and no mandatory cloud accounts.
Trial Period
Personal and Business plans include a 30-day free trial. No credit card information is required to start the trial. Features revert to the Free plan automatically if not renewed.
Verification
The software installer is verified and listed on official repositories including the Microsoft Store, Softpedia, MajorGeeks, and Uptodown.