Features
Login AlertX monitors Windows and Linux login activity and sends real-time alerts. It runs as a background Windows service or Linux systemd daemon and divides functionality into a Free tier for essential monitoring, a Personal tier for advanced detection and media capture, a Business tier that adds team workspace integrations, and a Server tier for headless CLI monitoring and SSH alerts.
Free Plan
Core monitoring and notification features available indefinitely without a license.
Login Alerts
Sends an email notification automatically upon the first successful login of every session.
Email Setup (OAuth & SMTP)
Supports “Sign in with Google” for secure OAuth connections, or standard SMTP configuration for other email providers. No separate app accounts are required.
Background Service
Installs as a Windows service that starts before any user logs in. Runs invisibly in the background without requiring manual activation.
Local Encrypted Storage
Encrypts sensitive configuration data and email credentials locally using Windows Data Protection API (DPAPI). Data is not uploaded to external servers.
System Tray Access
Manages settings and views local login history directly from the Windows system tray. Does not clutter the desktop or taskbar.
Personal Plan
Advanced detection, additional notification channels, and media capture. Includes a 30-day free trial without requiring a credit card.
AI Risk Detection
Uses an ensemble machine learning engine to learn your normal login patterns and assigns a Risk Score (0–1) to every login, shown as Low, Medium, or High. Automatically flags rapid repeated login attempts as potential brute-force activity, and flags logins from accounts inactive for an extended period.
RDP Monitoring
Tracks Remote Desktop Protocol (RDP) connections. Alerts include the source IP address and approximate geolocation of the remote user.
WhatsApp & Push Alerts
Routes login notifications to a mobile device via WhatsApp messaging or direct push notifications through the mobile companion app. Personal plan supports up to 5 linked devices.
Telegram & Discord Alerts
Sends login alerts directly to a Telegram chat or a Discord channel — a lightweight alternative to email or WhatsApp for users already active on these platforms.
Webcam Capture
Silently takes a photo from a selected webcam (or all connected webcams) at the exact moment the login occurs.
Screenshot Capture
Automatically captures and attaches an image of the active display to the alert, showing exactly what the desktop looked like upon login.
Audio Recording
Records up to 60 seconds of ambient audio from a selected microphone during the login process to capture environmental context.
Every Unlock Alert
Removes the “first-login-only” restriction. Sends an alert every time the Windows screen is unlocked or a user session switches.
System & Hardware Info
Appends active CPU usage, RAM, storage, GPU, and active network connections to the alert. Useful for auditing system state during access.
Notification Scheduling
Configures specific time windows for alerts (e.g., 10:00 PM to 8:00 AM). Prevents alert fatigue during standard working hours.
Built-in Telegram Channel
Integrated directly into the core app with a 1-click auto-pairing wizard. Dispatches alerts with native GPS map pins and rich media attachments (webcam, screenshot, audio).
Multi-Recipient Email Alerts
Route security alerts to multiple team members, secondary mailboxes, or ticketing systems simultaneously using comma-separated recipient addresses.
Storage Management & Retention
Live disk usage metrics and automated risk-tiered retention policies (Low, Medium, High) to prune older events and media captures automatically.
Delivery Health Monitoring
Proactively monitors channel dispatch health, surfaces exact protocol failure diagnostics, triggers live tray tooltip warnings, and provides 1-click fix shortcuts.
Security Self-Defense & FIM
Cryptographic File Integrity Monitoring (FIM), DPAPI CurrentUser secret isolation, hardened IPC pipes, and automated Windows Audit Policy self-remediation.
Business Plan
Includes everything in the Personal Plan, plus team workspace routing and a higher device limit for IT admins and shared environments.
Team Workspace Integrations
Sends alerts to Slack, Microsoft Teams, and Google Chat. These integrations are pre-built and configured with a one-click test connection — no manual webhook setup required.
Expanded Device Limit
Link up to 20 mobile devices to the companion app — four times the Personal plan’s limit — for teams and shared machines with multiple stakeholders.
Priority Support
Priority email support plus a dedicated Discord support channel, ahead of standard email support on the Personal plan.
Custom Webhook Integration
Push structured JSON alerts to any HTTP/HTTPS endpoint, SIEM, or internal webhook with customizable headers, authorization tokens, and media evidence.
Server Plan
Includes everything in the Business Plan, plus headless Linux daemon support, SSH monitoring, and the loginalertx Command Line Interface for infrastructure teams.
Command Line Interface (CLI)
Manage the background daemon, dispatch test alerts, and check real-time daemon status entirely from the terminal — no GUI required.
SSH & PAM Monitoring
Deep integration with Linux PAM and systemd journalctl to monitor SSH connections (key vs password), terminal TTY sessions, and sudo privilege elevations.
Native Packages
Distribute across your fleet easily via native .deb packages for Debian/Ubuntu or standalone tarballs for RHEL/Rocky distributions.
Feature Comparison
| Feature | Free | Personal | Business | Server |
|---|---|---|---|---|
| Email Alerts (First Login) | ||||
| RDP & SSH Monitoring | ||||
| Headless CLI / Linux Daemon | ||||
| Multi-User Tracking | ||||
| Background Windows Service | ||||
| Local SQLite Encryption | ||||
| AI Risk Detection & Anomaly Scoring | ||||
| WhatsApp & Push Notifications | ||||
| Telegram & Discord Alerts | ||||
| Slack, Microsoft Teams & Google Chat | ||||
| Webcam Photo Capture | ||||
| Desktop Screenshot Capture | ||||
| Microphone Audio Recording | ||||
| Every Unlock / Session Switch Alert | ||||
| Hardware & Network Info in Alerts | ||||
| Notification Scheduling | ||||
| Mobile Companion App Device Limit | — | Up to 5 | Up to 20 | Up to 20 |
| Server Installs Limit | — | — | — | Up to 3 |
General Information
Compatibility
Login AlertX v4.0 is fully cross-platform, supporting Windows 10/11 and major Linux distributions (Debian, Ubuntu, RHEL, Fedora, SUSE).
Privacy Architecture
Login history and config files are stored locally using AES-256 encrypted SQLite databases. Login AlertX has zero cloud storage and no mandatory cloud accounts.
Trial Period
Personal and Business plans include a 30-day free trial. No credit card information is required to start the trial. Features revert to the Free plan automatically if not renewed.
Verification
The software installer is verified and listed on official repositories including the Microsoft Store, Softpedia, MajorGeeks, and Uptodown.