Every part.
Watched.
Expiring certificates, lapsing renewals, edited email records and copycat domains. Your agency hears about them before a client does.
Or start a 14-day free trial- between checks
- 24h
- checks per domain
- 4
- things to install
- 0
Four checks.
One quiet inbox.
Certificate expiry
A lapsed certificate puts a full-page browser warning in front of every visitor. We read the live certificate and count down to its expiry.
- Real TLS handshake on the domain and www
- Broken chains and hostname mismatches
- New certificates in public CT logs
- Warnings at 30, 14, 7 and 1 days
brightwaterspa.com
Let’s Encrypt · expires 18 Oct
23d
Next warning at 14 days, to email and Slack.
Alerts where your team already works.
Email, Slack, Microsoft Teams or your own webhook, set up per workspace.
- fernhillbakery.co.ukCertificate expires in 3 days · Slack
- northcotelaw.comSPF record removed · Teams
- kestrelcycles.comRenewal due in 30 days · Email
Reports with your logo
A monthly PDF per client showing what was checked. Agency and Pro.
Organised by client
Group domains into clients and workspaces, and invite your team with roles.
TLS handshake on :443
DNS MX · SPF · DMARC
RDAP registry record
Nothing to install
Every check uses public data, so you can add a client’s domain without asking them for access.
Set up in a few minutes.
- 1
Add client domains
Type or paste them and group them by client.
- 2
We check every 24 hours
SSL, renewal, DNS, email security and lookalikes, with a fresh check before every report.
- 3
You hear first
Only when a date crosses a warning or something changes.
Priced by fleet size.
14 days free.
Compare plans in detailStarter
$19/month
- 25 domains, 2 workspaces
- 3 team seats
- All four checks
- Email alerts and webhooks
Agency
Most agencies$39/month
- 100 domains, 3 workspaces
- 10 team seats
- Monthly white-label PDF reports
- Slack and Microsoft Teams alerts
Questions.
Do clients need to install anything?
No. Every check uses public information: a TLS handshake with the site, DNS lookups, the registry’s RDAP record and public Certificate Transparency logs. Nothing to install and no DNS changes.
How is this different from an uptime monitor?
An uptime monitor asks whether the page loads. A certificate counting down, an edited email record or a copycat domain all happen while the page still loads fine.
How often are domains checked?
Every 24 hours, and always within the 24 hours before a client report goes out.
Where do alerts go?
Email, Slack, Microsoft Teams, or any HTTP endpoint you give us as a webhook.
Can we send reports to clients under our own brand?
Yes, on Agency and Pro. Each client gets a monthly PDF report with your logo.
What happens when the trial ends?
Choose a plan to keep monitoring. If you don’t, checks and alerts stop; your clients and domains stay in your account.