Now in Public Beta - Free for 45 days, no credit card requiredGet Started

Stop certificate outages before they start

Monitor SSL/TLS certificates across your infrastructure. Get alerts before expiration. Validate certificate chains automatically.

Get notified via

💬Slack🔔PagerDuty👥Teams🔗Webhooks
Built by engineers from Pure Storage
app.certwatch.io
Total
47
Healthy
38
Expiring
7
Critical
2
Certificates
api.example.com
89d
app.example.com
23d
staging.example.io
5d
256-bit encryption
Checks every 5 minutes
Instant alerts
Setup in 2 minutes
Built by Pure Storage engineers
The Problem

Certificate outages cost enterprises $11M+ on average

74% of organizations have experienced outages caused by expired certificates. With certificate lifespans shrinking to 90 days, manual tracking is no longer viable. Automation isn't optional—it's essential.

Spreadsheets can't track dozens of certificates reliably
Manual checks miss expiration deadlines
Weak certificates and broken chains go undetected
Alert fatigue from too many false positives
0%
of organizations face certificate outages
$0M
average cost per certificate outage
0
day certificate lifespans (Let's Encrypt)
0+
certificates where manual tracking fails
How It Works

Get started in under 2 minutes

No complex setup. No agents to install. Just add your domains and start monitoring.

Enter domain name...
example.com
api.example.com
app.example.io
Step 1

Add Your Certificates

Enter domain names or import from a list. We automatically discover certificate details, expiration dates, and chain information.

  • Bulk import support
  • Auto-discovery
  • Chain detection
Get Started Free
Features

Everything you need to
stay secure

From basic expiration monitoring to advanced chain validation and revocation checking. Built for modern infrastructure.

Full Chain Validation

Validate entire certificate chains from leaf to root. Detect missing intermediates, expired certificates in the chain, and self-signed issues automatically.

Chain completenessIntermediate detectionRoot trust verification

Revocation Checking

OCSP and CRL verification. Know immediately if a certificate has been revoked before it causes issues.

Multi-Channel Alerts

Slack, PagerDuty, Teams, Email, Webhooks - get notified where your team works.

Weak Crypto Detection

Detect weak RSA keys, deprecated algorithms like SHA1, and other security vulnerabilities.

CT Log MonitoringComing Soon

Monitor Certificate Transparency logs. Get alerted on unauthorized certificates.

5-Minute Checks

Check certificates as frequently as every 5 minutes. Never be surprised by an expiration again. Get alerts with customizable thresholds - 30, 14, 7, or 1 day before expiration.

Kubernetes NativeComing Soon

Auto-discover certificates from cert-manager. Deploy our Helm agent and monitor all TLS secrets automatically across all namespaces.

Domain MonitoringComing Soon

Track domain expirations alongside certificates. Monitor DNS for unexpected changes.

Integrations

Works with your existing stack

Get notified where your team already works. Connect to your favorite tools in seconds.

Notification Channels

Email
Slack
Microsoft Teams
PagerDuty
Webhooks
SoonDiscord

Infrastructure (Coming Soon)

SoonKubernetes
Sooncert-manager
Coming Soon
Terminal
# Add CertWatch Helm repository
$ helm repo add certwatch https://charts.certwatch.io

# Install the agent in your cluster
$ helm install certwatch-agent certwatch/agent \
--set apiKey=YOUR_API_KEY \
--namespace certwatch --create-namespace

✓ Agent deployed successfully
✓ Discovered 23 certificates
✓ Monitoring active
Kubernetes Native

Deploy once, monitor everything

Our lightweight Helm agent integrates with cert-manager, automatically discovers all Certificate resources and TLS Secrets. No manual configuration required.

Auto-discover cert-manager Certificate resources
Monitor TLS Secrets across all namespaces
Track cert-manager Certificate status and events
Support for private clusters (no inbound access needed)

Kubernetes integration is coming soon. Sign up for early access

Pricing

Simple, transparent pricing

Start free, upgrade as you grow. All plans include a 14-day free trial.

Beta Pricing: Sign up now and lock in 30% off for life when we launch.

Free

$0

For side projects

5 certificates
Email alerts only
6-hour check interval
Basic chain validation

Starter

$9/mo

For small teams

25 certificates
Slack integration
30-minute check interval
3 team members
Full chain validation
Most Popular

Growth

$29/mo

For growing teams

100 certificates
All notification channels
15-minute checks
10 team members
API access
Priority support

Business

$79/mo

For larger organizations

500 certificates
5-minute checks
Unlimited team members
Custom webhooks
Dedicated support

Enterprise

Need more? Custom limits, dedicated support, SLAs, and on-premise deployment.

FAQ

Frequently asked questions

Everything you need to know about CertWatch.

We connect to your domains over HTTPS and retrieve certificate information. We check expiration dates, validate the certificate chain, verify revocation status via OCSP and CRL, and detect weak cryptographic configurations.

Start monitoring in
under 2 minutes

No credit card required. Free plan includes 5 certificates forever.
Upgrade anytime as your infrastructure grows.

Start Monitoring Free