Never get caught
by an expired cert.
We open a real TLS handshake against every endpoint, read the certificate, and ping you well before it expires.
5 endpoints free · no card
All endpoints
Sorted by expiry| Hostname | Issuer | Expires | Checked | Status |
|---|---|---|---|---|
| legacy.acme.io | Sectigo RSA DV | 3d ago | 12m ago | Expired |
| app.acme.com | DigiCert TLS RSA | in 9d | 4m ago | Expiring |
| api.acme.com | Let's Encrypt R3 | in 27d | 2m ago | Healthy |
| staging.acme.io | Let's Encrypt R3 | in 64d | 1m ago | Healthy |
What it does
Three jobs, done well.
Real TLS handshakes
Live connections, not header checks. Issuer, validity window, signature algorithm, SANs, captured straight off the wire.
Early warnings
Endpoints inside the 14-day window surface on the console. Renewal gets queued up before anything breaks.
Alerts where you live
Email, Slack, Microsoft Teams, Telegram, Discord, or a signed JSON webhook into whatever you've got.
Get started
From signup to first alert.
No agents to install. No DNS to change.
-
Create an account
Email and password. Free tier covers 5 endpoints.
-
Add your endpoints
Hostname and port. We open the handshake and read the cert.
-
Wire up an alert channel
Email, Slack, Teams, Telegram, Discord, or a signed webhook.
Pricing
Flat plans. No seat tax.
Starter
Solo operators
€5 /mo
- 50 endpoints
- Hourly probes
- Email, Slack, Teams, Telegram, Discord
Pro
Production-grade
€15 /mo
- 250 endpoints
- Probes every 5 minutes
- All Starter channels + custom webhook
Enterprise
For larger setups.
Let's talk
Custom limits, cadence, and terms. Tell us what you need.
Contact us