SSL/TLS Certificate Monitoring for DevOps Teams
Never let an expired certificate take down your site again.
Website • Docs • Roadmap • Blog • Discord • Twitter
CertWatch monitors your SSL/TLS certificates and alerts you before they expire — via Slack, Email, PagerDuty, Microsoft Teams, or Webhooks.
| Feature | Description |
|---|---|
| Expiration Monitoring | Get alerts at 30, 14, 7, and 1 day before expiry |
| Chain Validation | Detect incomplete certificate chains that break API clients |
| Weak Crypto Detection | Identify SHA-1, short RSA keys, and outdated TLS versions |
| Revocation Checks | OCSP/CRL monitoring to know if certificates are revoked |
| Private Network Scanning | Monitor internal endpoints with our open-source agent |
| Kubernetes Integration | Auto-discover cert-manager certificates (coming soon) |
| Team Collaboration | Role-based access for your entire organization |
Monitor certificates on private networks and Kubernetes clusters with our open-source agent.
Install:
# Quick install (Linux/macOS)
curl -sSL https://certwatch.app/install.sh | bash
# Homebrew
brew install certwatch-app/tap/cw-agent
# Docker
docker run ghcr.io/certwatch-app/cw-agent:latest
# Kubernetes (Helm)
helm install cw-agent oci://ghcr.io/certwatch-app/helm-charts/cw-agent \
--namespace certwatch --create-namespace \
--set agent.name=my-cluster \
--set apiKey.value=cw_your_api_keyHelm Charts:
| Chart | Description | Status |
|---|---|---|
| cw-agent | Network certificate scanner | Available |
| cw-agent-certmanager | cert-manager integration | Coming soon |
| cw-stack | Umbrella chart (deploy one or both) | Coming soon |
No signup required — use these tools right now:
| Tool | Description |
|---|---|
| SSL Certificate Checker | Check any certificate's validity and expiration |
| Certificate Decoder | Decode and inspect certificate details |
| CSR Generator | Generate certificate signing requests |
| Security Headers Checker | Analyze HTTP security headers |
| DNS Lookup | Query DNS records for any domain |
| Uptime Checker | Check if a website is up |
| Resource | Description |
|---|---|
| Documentation | Full platform documentation |
| Agent Guide | cw-agent setup and configuration |
| SSL Expiration Guide | Complete guide for DevOps teams |
| Fix Chain Issues | Troubleshooting for Nginx & Apache |
Sign up free at certwatch.app — no credit card required.
