Error tracking service integrated; uncaught exceptions sent to dashboard; critical errors trigger team alerts
Why it matters
Uncaught exceptions that silently swallow stack traces (CWE-209, CWE-215) make production failures invisible until users complain. Without error tracking (Sentry, Datadog, Rollbar), you cannot quantify your application's error rate, identify the most impactful failures, or detect regressions introduced by a deployment. NIST SI-4 requires active system monitoring; ISO 25010 reliability.fault-tolerance requires that faults be detected and surfaced. A single untracked 500 error affecting 10% of checkout requests can silently drain revenue for days.
Severity rationale
High because untracked production exceptions mean teams are blind to user-impacting failures until the error rate is high enough for users to notice and report.
Remediation
Integrate Sentry into your Next.js application using the official SDK.
npm install @sentry/nextjs
Create sentry.client.config.js and sentry.server.config.js:
// sentry.client.config.js
import * as Sentry from '@sentry/nextjs';
Sentry.init({
dsn: process.env.SENTRY_DSN,
environment: process.env.NODE_ENV,
tracesSampleRate: 0.1, // adjust for traffic volume
});
Wire it into next.config.js via withSentryConfig. In the Sentry dashboard, configure an alert rule: trigger when error rate exceeds 5% over 5 minutes, notify #incidents in Slack and page the on-call engineer via PagerDuty for P1-class errors.
DetectionPro
The detection method for this pattern is part of AuditBuffet Pro.
The full method (what to look for, pass and fail conditions, and how results get reported) ships inside the Deployment Readiness Audit. The pattern definition, severity rationale, and remediation remain openly licensed under CC-BY-4.0.
External references
- cwe · CWE-209 — Generation of Error Message Containing Sensitive Information
- cwe · CWE-215 — Insertion of Sensitive Information Into Debugging Code
- iso-25010:2011 · reliability.fault-tolerance — Fault Tolerance — system operates despite hardware/software faults
- nist:rev5 · SI-4 — System Monitoring
- soc2:2017 · CC7.2 — Monitoring for anomalous system activity
Taxons
History
- 2026-04-18·v1.0.0·Initial import from deployment-readiness·automated
- 2026-07-06·v1.0.1·Add SOC 2 TSC mapping (CC7.2) from the verified compliance crosswalk register (docs/compliance/).·by soc2-mapping-enrichment-ship-2