CINXE.COM

<!DOCTYPE html> <html lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Cert Spotter - Certificate Transparency Monitor - Detect Security and Availability Problems</title> <link rel="icon" sizes="16x16" type="image/png" href="/assets/@faafe50b54dfb91476c01374043f217c.png"> <link rel="icon" sizes="32x32" type="image/png" href="/assets/@995de4b3fc64525a0c960b570432bcaf.png"> <link rel="icon" sizes="96x96" type="image/png" href="/assets/@1274d1f68350bbdeaa69c947ff0b1b24.png"> <link rel="apple-touch-icon" sizes="152x152" href="/assets/@a4fd500835cb9c03f04550fdddaa61ca.png"> <link rel="apple-touch-icon" sizes="167x167" href="/assets/@5734a91dace0895c2cb357a1bb5706f4.png"> <link rel="apple-touch-icon" sizes="180x180" href="/assets/@9e36fda1926f2047cead1adb754d0fe2.png"> <link rel="stylesheet" href="/assets/@0bbf4edb63d08bf2fac2c8ff279e839b.css"> <script src="/assets/@f7b3c3273f16dd1b342df8ea71a094b2.js"></script><meta name="generator" content="Unapologetically XSLT"> </head> <body> <p class="fluff"><a href="#main">Skip to content</a></p> <header class="header"><div class="header-main"> <div class="header-title"> <h1><a href="/"><img src="/assets/@ca19114b4ebcb52185af2f03a05d0afe.svg" alt="SSLMate"></a></h1> <a class="header-navtoggle" href="javascript:void(0);" onclick="this.closest('.header-main').classList.toggle('header-main--show_menu')">Menu</a> </div> <nav class="header-nav"><ul> <li class="header-item--has_dropdown"> <a href="/products" onclick="toggle_dropdown(this.parentNode, 'header-item--open'); return false;">Products</a><div class="header-dropdown"><ul> <li><a href="/certificates/"><strong>SSL Certificates</strong> <span>Easy & automated certificate issuance</span></a></li> <li><a href="/certspotter/"><strong>Cert Spotter</strong> <span>Monitor your certificates for availability and security problems</span></a></li> <li><a href="/ct_search_api/"><strong>Certificate Search API</strong> <span>Search Certificate Transparency logs using an easy API</span></a></li> </ul></div> </li> <li class="header-item--has_dropdown"> <a href="/tools/" onclick="toggle_dropdown(this.parentNode, 'header-item--open'); return false;">Free Tools</a><div class="header-dropdown"><ul> <li><a href="https://sslmate.com/caa/"><strong>CAA Record Helper</strong> <span>Protect your domain with a CAA record</span></a></li> <li><a href="https://whatsmychaincert.com/"><strong>What's My Chain Cert?</strong> <span>Solve intermediate certificate problems</span></a></li> <li><a href="https://sslmate.com/labs/ct_policy_analyzer/"><strong>CT Policy Analyzer</strong> <span>Check your website for compliance with browser Certificate Transparency policies</span></a></li> </ul></div> </li> <li><a href="/resources/">Resources</a></li> <li class="header-item--has_dropdown"> <a href="/pricing/" onclick="toggle_dropdown(this.parentNode, 'header-item--open'); return false;">Pricing</a><div class="header-dropdown"><ul> <li><a href="/pricing/certificates"><strong>SSL Certificates</strong> <span>Buy 1 year certs starting from $15.95.</span></a></li> <li><a href="/pricing/certspotter"><strong>Cert Spotter</strong> <span>Certificate monitoring from $15/month or $150/year. Try free for 30 days. </span></a></li> <li><a href="/pricing/ct_search_api"><strong>Certificate Search API</strong></a></li> </ul></div> </li> <li><a href="/help/">Help</a></li> <li class="header-login"><a href="/console">Log In</a></li> <li class="header-signup"><a href="/signup?for=certspotter">Sign Up</a></li> </ul></nav> </div></header><main id="main"> <div class="hero"> <h2>Stop Outages and Security Incidents Before They Happen</h2> <div class="hero-text"> <p> Cert Spotter monitors your domains for expiring, unauthorized, and invalid SSL certificates, so you can act before an incident, not after. </p> </div> <div class="hero-cta"> <a href="/signup?for=certspotter">Start Monitoring Today</a> </div> <div class="hero-ctanote"> 30 Day Free Trial </div> </div> <div class="trusted_at"> <h2>Trusted at</h2> <div class="trusted_at-logos"> <img alt="Juniper Networks" src="/img/norobots/customers/juniper.png"> <img alt="Fandom" src="/img/norobots/customers/fandom.png"> <img alt="Intrust Bank" src="/img/norobots/customers/intrustbank.png"> <img alt="University of Sheffield" src="/img/norobots/customers/university_of_sheffield.png"> <img alt="Color" src="/img/norobots/customers/color.png"> <img alt="Propublica" src="/img/norobots/customers/propublica.png"> <img alt="Kogan" src="/img/norobots/customers/kogan.png"> <img alt="Navient" src="/img/norobots/customers/navient.png"> <img alt="Modern Treasury" src="/img/norobots/customers/moderntreasury.png"> <img alt="On Fleet" src="/img/norobots/customers/onfleet.png"> </div> </div> <div class="backdrop"> <div class="backdrop-border"><div class="backdrop-top"></div></div> <div class="homeproduct"> <div class="homeproduct-text"> <h2>Improve Security</h2> <p> Attackers can use ill-gotten certificates to impersonate your website and intercept data from your customers. </p> <p> You shouldn't be in the dark when this happens. Cert Spotter monitors Certificate Transparency logs and alerts you when an unauthorized certificate is issued for one of your domains, protecting you from certificate authority vulnerabilities, DNS tampering, BGP hijacking, and subdomain takeover. </p> </div> <div class="homeproduct-img" style="max-width: 703px"> <a href="/img/home/unknown_issuance_email.png"><img src="/img/home/unknown_issuance_email_cropped.png" alt="Screenshot showing email notification of an unknown certificate, including the hostnames in the certificate, the certificate issuer, and links to mark the certificate as authorized"></a> </div> </div> <div class="homeproduct homeproduct--reverse"> <div class="homeproduct-text"> <h2>Avoid Outages</h2> <p> Expired, revoked, or incorrectly-installed certificates cause browser errors that drive customers away from your website and cost you business. </p> <p> Wouldn't you rather learn about problems before your customers notice them? Cert Spotter inventories and monitors your domain's certificates — even certificates installed by Shadow IT — and alerts you so you can fix problems before they cost you money. </p> </div> <div class="homeproduct-img" style="max-width: 703px"> <a href="/img/home/expiring_endpoints_email.png"><img src="/img/home/expiring_endpoints_email_cropped.png" alt="Screenshot showing email that lists expiring endpoints, with the hostname, expiration date, and issuer of each endpoint"></a> </div> </div> <div class="backdrop-border"><div class="backdrop-bottom"></div></div> </div> <div class="homesection"> <h2>We find problems that others miss</h2> <p> Certificates are a notoriously complex topic. You need a monitoring solution that you can trust to reliably detect obscure edge cases. </p> <p> SSLMate founder Andrew Ayer has contributed to the standards for Certificate Transparency and given invited talks at Apple and Google about Certificate Transparency monitoring. His security research has led to changes in the policies for certificate issuance. When you use Cert Spotter, his expertise is put to work monitoring your certificates. </p> </div> <div class="homesection"> <h2>We don't bother you with false alarms</h2> <p> When's the last time you heard a car alarm and thought a car was being stolen? </p> <p> A monitoring system that pesters you with false alarms is useless because you begin to ignore the alerts. Most Certificate Transparency monitors alert you about every single certificate for your domains, making it hard to notice when a malicious certificate is issued. </p> <p> When you use Cert Spotter, you can tell us ahead-of-time about legitimate certificates or trusted certificate authorities, and we won't alert you about certificates matching your specification. When you do receive an alert, you'll know to take it seriously. </p> </div> <div class="homesection"> <h2>We help you fix problems - even if you're not a certificate expert</h2> <p> Cert Spotter provides clear diagnostics and instructions for fixing problems, so you don't waste precious time responding to an incident. </p> <p> Incorrect certificate chain installed? Cert Spotter provides a link to download the correct chain. Unauthorized certificate detected? Cert Spotter provides revocation instructions tailored for the certificate authority which issued the certificate. </p> </div> <div class="homesection"> <h2>Features</h2> <ul class="featuregrid"> <li> <strong>Flexible Notifications</strong> Receive alerts by email, webhook, or Slack notification </li> <li> <strong>Certificate Inventory</strong> Your certificates are found and monitored automatically </li> <li> <strong>Subdomain Discovery</strong> Your subdomains are found and monitored automatically </li> <li> <strong>Web Dashboard</strong> See all your certificates and endpoints in one place </li> <li> <strong>Expiration Monitoring</strong> Get alerts when certificates haven't been renewed yet </li> <li> <strong>Installation Monitoring</strong> Correct chain, matching hostname, proper OCSP stapling, and more </li> <li> <strong>Compliance Monitoring</strong> Ensure your certs comply with browser CT policies </li> <li> <strong>Unknown Certificate Alerts</strong> Get alerts when a certificate is issued by an untrustworthy issuer </li> <li> <strong>CAA Monitoring</strong> Get alerts when a CAA record changes or a certificate violates your CAA policy </li> <li> <strong>MTA-STS Monitoring</strong> Ensure your email domains comply with MTA-STS policies </li> <li> <strong>MTA-STS Automation</strong> Effortlessly publish correct MTA-STS policies </li> <li> <strong>Monitor Multiple IPs and Ports</strong> All of an endpoints' IP addresses are monitored, and you can customize the port numbers </li> </ul> </div> <div class="homesection" style="max-width:90rem"> <h2>Plans & Pricing</h2> <div class="pricing pricing--certspotter pricing--darker"> <div> <h3>Hobbyist</h3> <p class="pricing-price"> <span class="pricing-currencysign">$</span><span class="pricing-amount">15</span><span class="pricing-term"> / month</span> </p> <p class="pricing-cta"> <a href="/signup?for=certspotter">Start 30 Day Free Trial</a> </p> <p class="pricing-feature"> Monitor up to <span class="nobr"><strong class="pricing-num">20</strong> <span class="tooltip" tabindex="0">endpoints<span class="tooltip-content"><span>A domain or sub-domain, such as example.com, www.example.com, or *.example.com, whose certificates are monitored</span></span></span></span> </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Continuous monitoring<span class="tooltip-content"><span>We continuously monitor Certificate Transparency and will alert you immediately about unknown certificates</span></span></span> for unauthorized certificates </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Certificate health checks<span class="tooltip-content"><span>Learn about downtime-causing certificate installation problems, like a mismatched hostname or incomplete chain</span></span></span> <strong class="nobr">every hour</strong> </p> <p class="pricing-feature"> Monitor port 443 on one IPv4 and one IPv6 address per endpoint </p> <p class="pricing-feature"> 30 days <span class="tooltip" tabindex="0">audit log<span class="tooltip-content"><span>A record of account activity, like logins, password changes, etc.</span></span></span> retention </p> </div> <div> <h3>Startup</h3> <p class="pricing-price"> <span class="pricing-currencysign">$</span><span class="pricing-amount">100</span><span class="pricing-term"> / month</span> </p> <p class="pricing-cta"> <a href="/signup?for=certspotter">Start 30 Day Free Trial</a> </p> <p class="pricing-feature"> Monitor up to <span class="nobr"><strong class="pricing-num">150</strong> <span class="tooltip" tabindex="0">endpoints<span class="tooltip-content"><span>A domain or sub-domain, such as example.com, www.example.com, or *.example.com, whose certificates are monitored</span></span></span></span> </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Continuous monitoring<span class="tooltip-content"><span>We continuously monitor Certificate Transparency and will alert you immediately about unknown certificates</span></span></span> for unauthorized certificates </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Certificate health checks<span class="tooltip-content"><span>Learn about downtime-causing certificate installation problems, like a mismatched hostname or incomplete chain</span></span></span> <strong class="nobr">every 15 minutes</strong> </p> <p class="pricing-feature"> Monitor unlimited ports and IP addresses per endpoint </p> <p class="pricing-feature"> DNS provider and domain registrar <span class="tooltip" tabindex="0">integrations<span class="tooltip-content"><span>Cert Spotter will discover domains to automatically monitor, ensuring you are always monitoring your entire domain portfolio.</span></span></span> </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Notification by webhook<span class="tooltip-content"><span>Cert Spotter can invoke a webhook when it detects an unknown certificate. Useful for integration with SIEMs.</span></span></span> </p> <p class="pricing-feature"> Faster customer support </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Route account emails<span class="tooltip-content"><span>For example, you could route invoices to your finance team, unauthorized certificate alerts to your security team, and expiring certificate alerts to your ops team.</span></span></span> to multiple addresses </p> <p class="pricing-feature"> 90 days <span class="tooltip" tabindex="0">audit log<span class="tooltip-content"><span>A record of account activity, like logins, password changes, etc.</span></span></span> retention </p> </div> <div> <h3>Business</h3> <p class="pricing-price"> <span class="pricing-currencysign">$</span><span class="pricing-amount">500</span><span class="pricing-term"> / month</span> </p> <p class="pricing-cta"> <a href="/signup?for=certspotter">Start 30 Day Free Trial</a> </p> <p class="pricing-feature"> Monitor up to <span class="nobr"><strong class="pricing-num">1,000</strong> <span class="tooltip" tabindex="0">endpoints<span class="tooltip-content"><span>A domain or sub-domain, such as example.com, www.example.com, or *.example.com, whose certificates are monitored</span></span></span></span> </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Continuous monitoring<span class="tooltip-content"><span>We continuously monitor Certificate Transparency and will alert you immediately about unknown certificates</span></span></span> for unauthorized certificates </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Certificate health checks<span class="tooltip-content"><span>Learn about downtime-causing certificate installation problems, like a mismatched hostname or incomplete chain</span></span></span> <strong class="nobr">every 5 minutes</strong> </p> <p class="pricing-feature"> Monitor unlimited ports and IP addresses per endpoint </p> <p class="pricing-feature"> DNS provider and domain registrar <span class="tooltip" tabindex="0">integrations<span class="tooltip-content"><span>Cert Spotter will discover domains to automatically monitor, ensuring you are always monitoring your entire domain portfolio.</span></span></span> </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Notification by webhook<span class="tooltip-content"><span>Cert Spotter can invoke a webhook when it detects an unknown certificate. Useful for integration with SIEMs.</span></span></span> </p> <p class="pricing-feature"> Monitor from 10 worldwide locations </p> <p class="pricing-feature"> Priority customer support </p> <p class="pricing-feature"> <span class="tooltip" tabindex="0">Route account emails<span class="tooltip-content"><span>For example, you could route invoices to your finance team, unauthorized certificate alerts to your security team, and expiring certificate alerts to your ops team.</span></span></span> to multiple addresses </p> <p class="pricing-feature"> Unlimited <span class="tooltip" tabindex="0">audit log<span class="tooltip-content"><span>A record of account activity, like logins, password changes, etc.</span></span></span> retention </p> </div> <div> <h3>Enterprise</h3> <p class="pricing-custom"> Custom </p> <p class="pricing-cta"> <a href="/contact">Contact Us</a> </p> <p class="pricing-text"> We would love to work with you to tailor a certificate monitoring solution that fits your needs. </p> <p class="pricing-text"> Email us at <a href="mailto:enterprise@sslmate.com">enterprise@sslmate.com</a> to speak with a founding engineer. </p> </div> </div> </div> </main><footer class="footer"><div class="footer-cta"><div> <h2> Let us worry about your certificates so you don't have to. </h2> <div class="ctabuttons"> <a href="/signup?for=certspotter" class="ctabuttons-signup">Start Free Trial</a>  </div> </div></div> <div class="footer-nav"> <div> <h3>Products</h3> <ul> <li><a href="/certificates/">SSL Certificates</a></li> <li><a href="/certspotter/">Cert Spotter</a></li> <li><a href="/ct_search_api/">Certificate Search API</a></li> </ul> </div> <div> <h3>Company</h3> <ul> <li><a href="/about">About</a></li> <li><a href="/contact">Contact</a></li> <li><a href="/blog/">Blog</a></li> <li><a href="/help/changelog">Change Log</a></li> <li><a href="/security">Security</a></li> </ul> </div> <div> <h3>Free Tools</h3> <ul> <li><a href="https://sslmate.com/caa/">CAA Record Helper</a></li> <li><a href="https://whatsmychaincert.com/">What's My Chain Cert?</a></li> <li><a href="https://sslmate.com/labs/ct_policy_analyzer/">CT Policy Analyzer</a></li> </ul> </div> <div> <h3>Support</h3> <ul> <li><a href="/help">Documentation</a></li> <li><a href="/help/faq">FAQ</a></li> <li><a href="/help/reference/cli1">CLI Reference</a></li> <li><a href="/help/reference/apiv2">API Reference</a></li> <li><a href="/contact">Contact Support</a></li> <li><a href="/accessibility">Accessibility</a></li> </ul> </div> <div> <h3>Policies</h3> <ul> <li><a href="/policies/tos">Terms of Service</a></li> <li><a href="/policies/privacy">Privacy Policy</a></li> <li><a href="/policies/billing">Refunds & Billing</a></li> <li><a href="/policies/subscriber_agreements">Certificate Subscriber Agreements</a></li> </ul> </div> </div> <div class="footer-copyright"> Copyright © 2025 Opsmate, Inc. </div></footer> </body> </html>