Never miss a certificate expiration again.

TLS certificate and uptime monitoring for production infrastructure. The alert reaches you before the expiry becomes an outage.

For MSP owners and technical directors managing 50-500 client domains.

api.example.com:443 TLS, chain and expiry, monitored continuously. notAfter=
issued 27 days ago today: 63 days left, chain valid alerts start 25 days out 25 days 14 days 7 days

Expired certificates cost you customers.

Microsoft Teams went dark in 2020 because a single certificate lapsed. Most expiry outages start the same way: nobody was watching the date.

ERR_CERT_DATE_INVALID Visitors see a full-page security warning instead of your checkout.
CERTIFICATE_VERIFY_FAILED API integrations fail silently when certs expire.
Verify return: 10 Forgotten subdomains expire without anyone noticing.
SAN: untracked Spreadsheet tracking breaks the first time someone forgets a renewal.
openssl s_client -connect checkout.yourstore.com:443 RFC 5280
depth=0 CN = checkout.yourstore.com
verify error:num=10:certificate has expired
notAfter=May 28 11:02:44 2026 GMT
---
Certificate chain
 0 s:CN = checkout.yourstore.com
   i:C = US, O = Let's Encrypt, CN = R11
---
SSL handshake has read 4476 bytes and written 401 bytes
Verification error: certificate has expired

Verify return code: 10 (certificate has expired)

Track every certificate, including the ones you forgot about.

Certificate checks, subdomain discovery, alerting, and a full REST API.

TLS Certificate Monitoring

Track expiration dates across all your domains. Get alerts 30, 14, and 7 days before expiry so you never miss a renewal.

Subdomains Monitoring

Add a root domain and CertWatch.io finds every subdomain in Certificate Transparency logs, then monitors each one.

Alerts

Receive instant notifications via email or webhooks. Customize thresholds and escalation policies.

API-First

Full REST API access lets you integrate monitoring into your CI/CD pipelines and workflows.

ct-log entries for yourstore.com RFC 6962
LOGGED AT     ISSUER                         MATCHING IDENTITY
2026-06-08    O=Let's Encrypt, CN=R11        api.yourstore.com
2026-06-02    O=Let's Encrypt, CN=R10        checkout.yourstore.com
2026-05-27    O=Google Trust Svcs, CN=WR3    staging.yourstore.com
2026-05-19    O=Let's Encrypt, CN=R11        legacy-portal.yourstore.com  <- untracked

Get started in minutes.

You add a domain. The checks and alerts run on our side.

1

Add your domains

Enter a root domain and we automatically discover all subdomains and their certificates.

Input one root domain
Discovery automatic
2

We monitor 24/7

Our infrastructure checks your certificates and endpoints as often as every 30 seconds, depending on plan.

Uptime checks every 30s+
Coverage 24/7
3

Get alerted instantly

Receive proactive alerts before expirations and immediate notifications when issues arise.

Lead time 30 / 14 / 7 days
Channels email, webhook

Every feature is an endpoint.

Automate certificate monitoring from CI/CD or build your own dashboards on the REST API at api.certwatch.io.

5 min
Check Interval
99.99%
Uptime SLA
30 s
Fastest Uptime Check
GET /api/v1/certificates 200 OK
{
  "domain": "api.example.com",
  "certificate": {
    "issuer": "Let's Encrypt",
    "valid_from": "",
    "valid_to": "",
    "days_until_expiry": 1
  },
  "status": {
    "healthy": true,
    "last_checked": ""
  }
}

Four plans. Flat monthly price.

Every plan starts with a 14-day free trial. Prices are in USD per month, per organization.

Startup

For side projects & small teams

$15 /mo
  • 30 certificate monitors
  • 30 uptime monitors
  • 6-hour cert check interval
  • 5-minute uptime checks
  • Email alerts
Start Free Trial No credit card required
Business

For production & compliance

$125 /mo
  • 500 certificate monitors
  • 500 uptime monitors
  • 30-minute cert check interval
  • 30-second uptime checks
  • Email & webhook alerts
  • Priority support
Start Free Trial No credit card required
Enterprise

For large-scale infrastructure

starts at $499 /mo
  • 2,500 certificate monitors included
  • 2,500 uptime monitors included
  • 30-minute cert check interval
  • 30-second uptime checks
  • Email & webhook alerts
  • Dedicated support
Contact Sales

Stop finding out about expired certificates from your customers. Add your domains and the first scan shows every expiry date within minutes.

No credit card details required. Prices in USD.

Try it for free