I would suggest herpstats as well particularly the herpstat1. It is a bit more but the additional safety features it brings to the table are beyond all its competition.
1 it uses 'soft heat' system even after a power failure when the temp is cool it does not just click on delivering 100% power it slowly adds power to avoid high spikes especially important with tubs.
2 It employs a mechanical relay that during a failure is more likely to fail closed than open.
3 It also has Over and Under temp protection. This is the biggest feature on the unit. It will protect against probe movement if the probe becomes separated from the heat source it will shut off power at the point the user selects.
This unit and the other units with these feature are the ONLY ones I'd suggest being used with out a failsafe (to protect against failure and probe movement)
- - - Updated - - -
Herpstats are all proportional they do not make on/off units.