Approaches are provided for determining a risk level for server health check processing. An approach includes creating statistical process control analyzes for each of one or more servers on a network by calculating performance parameters for each of one or more servers based on historical values for one or more key process indicators of server health or vulnerability. The approach further includes collecting new values for each of the one or more key process indicators, detecting significant changes of the mean or variation in each of the one or more key process indicators, and determining a risk level for each of the one or more servers based on a number of the significant changes of the mean or variation. The approach further includes providing a health check recommendation for each of the one or more servers based on the risk level determined for each of the one or more servers.