Know which certificates are expiring and who owns them.
SecurityAlert finds the TLS certificates on your public perimeter, checks their cryptography, and shows which ones need attention. Assign an owner to each certificate so alerts reach the person who can renew or replace it.
Included in every Business plan. No card to start the trial and no per-certificate fees.
What you can do with each certificate
Find it, check it, assign an owner, set your rules, and track it through renewal. Certificate monitoring is part of the same platform as your brand and threat monitoring.
See the whole inventory
SecurityAlert combines live probes with Certificate Transparency data and grades each certificate from A+ to F based on protocol, chain, and key strength. You can export the inventory to CSV.
Assign an owner
Assign a person and team to each certificate so an urgent expiration alert reaches someone who can act on it.
Follow each rotation
See when a certificate was last replaced, which certificate replaced it, and what changed during each rotation.
Find certificates issued outside your process
SecurityAlert watches Certificate Transparency logs for certificates issued on your domains. If one appears to be fraudulent, you can open a takedown case from the finding.
See why a certificate lost points
SecurityAlert explains whether the grade was lowered by a weak signature, incomplete chain, missing revocation information, short key, or a common-name and SAN mismatch.
Warn the owner before expiration
Send warnings at 30, 14, 7, 3, and 1 day to the owner's email and your Slack or Teams channel. Duplicate alerts for the same certificate are suppressed.
Set your certificate rules
Choose from nine policy rules, including an approved-CA list that flags certificates issued by an authority your company has not approved.
Check compliance coverage
Map each certificate to relevant PCI DSS, SOC 2, and NIST controls and see your current coverage before an assessment begins.
Plan for post-quantum changes
Review the key and signature algorithms in use across your inventory so you can plan future cryptography changes.
How certificate monitoring works
SecurityAlert follows each certificate from the first observation through grading, ownership, and renewal.
Discover
External probes and Certificate Transparency logs find certificates on your domains, including ones issued for hosts you do not recognize.
Grade
Each certificate receives an A+ to F grade based on its protocol, chain integrity, signature strength, and key size, with an explanation of the result.
Assign
Assign a person and team, apply your certificate rules, and map the certificate to the compliance frameworks you use.
Renew
Alerts reach the owner and your chat channel before expiration. When a replacement appears, SecurityAlert records the rotation.
Certificate management is included in the Business plan.
For $249 a month, the Business plan includes certificate discovery, grading, owner assignment, expiration alerts, policy checks, and compliance mapping alongside brand and threat monitoring. There are no per-certificate fees.
Common questions
Do you issue or install certificates?
No. We are the governance and visibility layer, not a certificate authority. We discover, grade, and track the certificates you already have from any issuer, then tell you exactly when and why to act. You keep issuing wherever you issue today.
How do you find certificates I did not know about?
Two ways. We live-probe the hosts on your perimeter, and we watch Certificate Transparency logs for certificates issued on your domains, including ones on hosts you never served publicly. Both feed a single inventory, deduplicated by fingerprint.
Which compliance frameworks do you map to?
PCI DSS, SOC 2, and NIST. Every certificate is scored against the controls an auditor checks, with a live percentage per framework so you know where you stand before the assessment starts. Compliance mapping is available on Business and above.
Do I need to install an agent?
No. Discovery is external and read-only. There is nothing to deploy inside your network to see your public certificate estate.
Is it included in my plan?
Yes. Certificate lifecycle management is part of every Business plan at $249 a month flat, alongside brand monitoring, threat intelligence, and attack-surface scoring. No per-certificate fees.
Add a domain and see its certificates.
SecurityAlert starts building the inventory during your Business trial. You do not need to install an agent or enter a credit card.