About
CertSentry keeps watch over your certificates, domains, DNS and uptime, and warns you days before anything breaks. It opens real TLS connections, tracks domain registration expiry via RDAP, snapshots DNS records daily, and checks uptime from multiple regions. Alerts are delivered via email, Slack, Telegram, Discord, and webhooks. It also offers public status pages, Certificate Transparency monitoring, DMARC parsing, TCP port checks, and heartbeat monitoring.
Key features
- SSL certificate expiry monitoring (real TLS connection)
- Domain registration expiry tracking (RDAP with WHOIS fallback)
- DNS record change detection (A, AAAA, MX, NS, CNAME, TXT)
- Uptime monitoring from multiple regions (N. America, Europe, Asia)
- Alert thresholds: 30, 14, 7, 3, 1 days before expiry
- Two-region, two-consecutive-check outage confirmation
- Certificate Transparency alerts
- TCP port checks
- Heartbeat monitoring for cron jobs, backups, deploys
- DMARC report parsing
- Public status pages with certificate and domain health
- Shared workspaces with role-based access
- Environment labels (production/staging)
- Monitor client domains without ownership
- REST API with scoped keys
- Daily uptime stats with p50/p95 latency
- Declarative monitor sync from repo with dry-run
- Data export and deletion
Pricing
Free personal workspace forever. Paid plans start at $5/mo (Starter), $12/mo (Pro), $50/mo (Agency). Annual billing saves ~2 months.
Free
$0 / month
- 1 monitor
- Daily checks
- Email alerts
- Personal workspace forever
Starter
$5 / month
- 10 monitors
- Uptime every 5 min
- 1 public status page
- Slack, Telegram, Discord & webhook alerts
Pro
$12 / month
- 50 monitors
- Uptime every 1 min
- 3 regions
- Certificate Transparency alerts
Agency
$50 / month
- 250 monitors
- Unlimited team seats
- 10 status pages
- Custom domains + white-label status pages
Frequently asked
- What does CertSentry monitor besides SSL certificate expiry?
- CertSentry monitors domain registration expiry via RDAP with WHOIS fallback, detects DNS record changes (A, AAAA, MX, NS, CNAME, TXT), checks uptime from multiple regions (N. America, Europe, Asia), and performs TCP port checks and heartbeat monitoring for cron jobs, backups, and deploys.
- How does CertSentry alert me when something is about to expire or go down?
- CertSentry sends alerts via email, Slack, Telegram, Discord, and HMAC-SHA256 signed webhooks. You can set thresholds at 30, 14, 7, 3, or 1 day before expiry, and outages are confirmed only after two consecutive checks from two regions.
- Who is CertSentry best suited for?
- CertSentry is designed for teams and agencies that need to monitor SSL certificates, domains, DNS, and uptime to prevent silent outages. It's ideal for DevOps, IT managers, and web hosting providers who manage multiple client sites.
- What is included in the free plan versus paid plans?
- The free plan offers a personal workspace forever with no cost. Paid plans start at $5/mo (Starter), $12/mo (Pro), and $50/mo (Agency). Annual billing saves approximately 2 months. Specific feature limits per tier are not detailed, but all plans include the core monitoring features.
- Does CertSentry offer public status pages or Certificate Transparency monitoring?
- Yes, CertSentry provides public status pages and Certificate Transparency monitoring. It also parses DMARC reports to help detect email spoofing issues.
- How does CertSentry verify SSL certificate expiry?
- CertSentry opens real TLS connections to your servers to check certificate expiry, rather than relying on cached data. This ensures accurate detection of expiration dates and misconfigurations.