| 400 | Bad Request | The request was malformed. | Failure. Check required headers or parameters the endpoint expects. |
| 401 | Unauthorized | Authentication is required or failed. | Failure unless expected. Expired tokens and rotated credentials are the usual cause. |
| 403 | Forbidden | The server understood but refuses. | Failure. WAFs and bot protection often block monitoring user agents; allowlist the probe. |
| 404 | Not Found | No resource at this URL. | Failure. Deployments that drop routes or change paths show up here first. |
| 405 | Method Not Allowed | The method is not supported for this URL. | Failure. HEAD is sometimes rejected where GET works; use GET. |
| 408 | Request Timeout | The server timed out waiting for the request. | Failure; usually a slow network path or an idle-connection policy. |
| 409 | Conflict | The request conflicts with current state. | Expected for some idempotency tests, otherwise a failure. |
| 410 | Gone | The resource is permanently gone. | Failure; remove the monitor if intentional. |
| 413 | Content Too Large | The request body exceeds server limits. | Failure on transaction steps with large bodies. |
| 415 | Unsupported Media Type | The body format is not supported. | Check the Content-Type header of the step. |
| 422 | Unprocessable Content | The syntax is fine but the content fails validation. | Failure; validation rules changed or test data is stale. |
| 425 | Too Early | The server refuses a request that might be replayed. | Rare; related to TLS early data. |
| 429 | Too Many Requests | Rate limited. | Failure by default. Lower the check frequency or allowlist the probe; honour Retry-After. |
| 451 | Unavailable For Legal Reasons | Access is denied for legal reasons. | Depends on the probe location; compare regions. |