CW/01TLS certificate & uptime monitoring

Never miss a certificate expiration again.

TLS certificate and uptime monitoring for production infrastructure. The alert reaches you before the expiry becomes an outage.

For MSP owners and technical directors managing 50-500 client domains.

01 / The Problem observed failure modes

Expired certificates cost you customers.

Microsoft Teams went dark in 2020 because a single certificate lapsed. Most expiry outages start the same way: nobody was watching the date.

ERR_CERT_DATE_INVALID Visitors see a full-page security warning instead of your checkout.
CERTIFICATE_VERIFY_FAILED API integrations fail silently when certs expire.
Verify return: 10 Forgotten subdomains expire without anyone noticing.
SAN: untracked Spreadsheet tracking breaks the first time someone forgets a renewal.
openssl s_client -connect checkout.yourstore.com:443 RFC 5280
depth=0 CN = checkout.yourstore.com
verify error:num=10:certificate has expired
notAfter=May 28 11:02:44 2026 GMT
---
Certificate chain
 0 s:CN = checkout.yourstore.com
   i:C = US, O = Let's Encrypt, CN = R11
---
SSL handshake has read 4476 bytes and written 401 bytes
Verification error: certificate has expired

Verify return code: 10 (certificate has expired)
02 / What You Get monitoring coverage

Track every certificate, including the ones you forgot about.

Certificate checks, subdomain discovery, alerting, and a full REST API.

02.1 x509

TLS Certificate Monitoring

Track expiration dates across all your domains. Get alerts 30, 14, and 7 days before expiry so you never miss a renewal.

02.2 ct logs

Subdomains Monitoring

Add a root domain and CertWatch finds every subdomain in Certificate Transparency logs, then monitors each one.

02.3 webhook

Alerts

Receive instant notifications via email, Slack, or webhooks. Customize thresholds and escalation policies.

02.4 rest

API-First

Full REST API access lets you integrate monitoring into your CI/CD pipelines and workflows.

ct-log entries · yourstore.com RFC 6962
LOGGED AT     ISSUER                         MATCHING IDENTITY
2026-06-08    O=Let's Encrypt, CN=R11        api.yourstore.com
2026-06-02    O=Let's Encrypt, CN=R10        checkout.yourstore.com
2026-05-27    O=Google Trust Svcs, CN=WR3    staging.yourstore.com
2026-05-19    O=Let's Encrypt, CN=R11        legacy-portal.yourstore.com  <- untracked
03 / Operating Model from signup to first alert

Get started in minutes.

You add a domain. The checks and alerts run on our side.

03.1

Add your domains

Enter a root domain and we automatically discover all subdomains and their certificates.

Input one root domain
Discovery automatic
03.2

We monitor 24/7

Our infrastructure checks your certificates and endpoints as often as every 30 seconds, depending on plan.

Uptime checks every 30s+
Coverage 24/7
03.3

Get alerted instantly

Receive proactive alerts before expirations and immediate notifications when issues arise.

Lead time 30 / 14 / 7 days
Channels email · slack · webhook
04 / The API api.certwatch.io

Every feature is an endpoint.

Automate certificate monitoring from CI/CD or build your own dashboards on the REST API.

5 min
Check Interval
99.99%
Uptime SLA
30 s
Fastest Uptime Check
GET /api/v1/certificates 200 OK
{
  "domain": "api.example.com",
  "certificate": {
    "issuer": "Let's Encrypt",
    "valid_from": "",
    "valid_to": "",
    "days_until_expiry": 1
  },
  "status": {
    "healthy": true,
    "last_checked": ""
  }
}
05 / Pricing USD / month / organization

Four plans. Flat monthly price.

Every plan starts with a 14-day free trial.

Startup

For side projects & small teams

$15 /mo
  • 30 certificate monitors
  • 30 uptime monitors
  • 6-hour cert check interval
  • 5-minute uptime checks
  • Email alerts
Start Free Trial No credit card required
Business

For production & compliance

$125 /mo
  • 500 certificate monitors
  • 500 uptime monitors
  • 30-minute cert check interval
  • 30-second uptime checks
  • Email, Slack & webhook alerts
  • Priority support
Start Free Trial No credit card required
Enterprise

For large-scale infrastructure

starts at $499 /mo
  • 2,500 certificate monitors included
  • 2,500 uptime monitors included
  • 30-minute cert check interval
  • 30-second uptime checks
  • All alert integrations
  • Dedicated support
Contact Sales
06 / Start app.certwatch.io

Stop finding out about expired certificates from your customers. Add your domains and the first scan shows every expiry date within minutes.

No credit card details required · prices in USD

Try it for free