Find every certificate before it expires, breaks, or gets impersonated.
SecurityAlert.ai discovers every TLS certificate on your perimeter, grades its crypto, assigns it a named owner, and warns you weeks before it lapses. The governance layer enterprise CLM charges six figures for, self-serve from $249 a month.
Included in every Business plan. No per-certificate fees.
Everything your certificate estate needs, in one place.
Discovery, grading, ownership, alerting, policy, and compliance, on the same platform as your brand and threat monitoring.
Live inventory, A+ to F
Every certificate we can see, live-probed and pulled from Certificate Transparency, scored on protocol, chain, and key strength. Export the whole estate to CSV in a click.
Every cert has an owner
Assign a named owner and team to each certificate, so the 2 a.m. expiry alert reaches a person, not a distribution list nobody reads.
Rotation timeline
See when each certificate was last rotated, what replaced it, and the full change log, so a silent re-issue never slips past you.
Shadow certs from CT logs
We watch Certificate Transparency for certificates issued on your domains outside your process, then feed the fraudulent ones straight into the takedown pipeline.
Crypto posture grading
Weak signatures, incomplete chains, missing revocation info, short keys, and CN-not-in-SAN, each flagged with the exact reason the certificate lost points.
Tiered expiry alerts
Staged warnings at 30, 14, 7, 3, and 1 day, to the owner's inbox and your Slack or Teams channel, deduplicated so nobody gets paged twice for the same cert.
Policy enforcement
Nine policy rule types, including an approved-CA allowlist that flags any certificate issued by a certificate authority you never sanctioned.
PCI, SOC 2, and NIST
Every certificate mapped to the controls auditors check, with a live percentage per framework so you know where you stand before the assessor arrives.
Post-quantum readiness
A crypto-agility view of your key and signature algorithms, so you can see today how much of your estate is ready for the post-quantum migration.
The full lifecycle, closed.
From the certificate you never knew existed to the renewal that lands on the right person's desk.
Discover
External probing and Certificate Transparency surface every cert on your domains, including shadow certs on hosts you never served.
Grade
Each certificate is scored A+ to F on protocol, chain integrity, signature strength, and key size, with the reason spelled out.
Assign
Attach a named owner, apply policy, and map the certificate to the compliance frameworks you report against.
Renew
Tiered alerts reach the owner and your chat channel weeks ahead, and the rotation is logged the moment the new cert appears.
What enterprise CLM charges six figures for. Self-serve, from $249 a month.
Enterprise certificate platforms start in the five figures and climb into six once professional services are added. SecurityAlert.ai gives you discovery, grading, ownership, expiry alerting, policy, and compliance mapping in the same plan as brand and threat monitoring. One platform, one bill, no per-certificate fees.
Questions, answered.
Do you issue or install certificates?
No. We are the governance and visibility layer, not a certificate authority. We discover, grade, and track the certificates you already have from any issuer, then tell you exactly when and why to act. You keep issuing wherever you issue today.
How do you find certificates I did not know about?
Two ways. We live-probe the hosts on your perimeter, and we watch Certificate Transparency logs for certificates issued on your domains, including ones on hosts you never served publicly. Both feed a single inventory, deduplicated by fingerprint.
Which compliance frameworks do you map to?
PCI DSS, SOC 2, and NIST. Every certificate is scored against the controls an auditor checks, with a live percentage per framework so you know where you stand before the assessment starts. Compliance mapping is available on Business and above.
Do I need to install an agent?
No. Discovery is external and read-only. There is nothing to deploy inside your network to see your public certificate estate.
Is it included in my plan?
Yes. Certificate lifecycle management is part of every Business plan at $249 a month flat, alongside brand monitoring, threat intelligence, and attack-surface scoring. No per-certificate fees.
See your certificates in minutes.
Add a domain and watch the inventory build itself. No agent, no card for the free tier.