Know What's Exposed.Fix What Matters.
CertNotify gives you one unified view of your internet-facing assets, applications, code, cloud and infrastructure — continuously detecting security risks, prioritizing what matters, and telling you what to fix before it becomes an incident.
Monitor everything. Find risks early. Act before your users notice.
| Asset | Check | Status |
|---|---|---|
| certnotify.com | Certificate | 74d left |
| api.shopify.io | Certificate | 12d left |
| dashboard.vercel.co | DMARC | p=none |
| checkout-svc | Dependencies | 2 critical |
| infra/prod.tf | IaC | Passing |
| legacy-infra.net | Domain | Expired |
Up and running in under a minute
No complex setup. No agents to install. No credit card.
Enter any domain
Type a domain and get an instant report on SSL validity, expiry date, TLS version, DNS records, and email authentication. No account needed.
Add it to monitoring
Create a free account and add your domains to the dashboard. CertNotify checks them every 24 hours and logs changes over time.
Get alerted early
Receive email or WhatsApp alerts at 30, 14, and 7 days before expiry — and immediately if DNS changes or your site goes down.
Everything in one place
From certificate discovery to real-time alerting — the full security lifecycle, covered.
SSL Certificate Monitoring
Track certificate chain integrity, issuer details, and expiry dates across all your domains. Alerts fire at 30, 14, and 7 days before expiry — giving your team time to renew without triggering a browser warning or causing a service outage.
Domain Expiry Tracking
Monitor domain registration expiry via live WHOIS data. Know before your domain lapses and your brand is at risk.
TLS Configuration Audit
Detect outdated TLS 1.0/1.1, weak cipher suites, and misconfigured certificates with actionable remediation steps.
DNS & DNSSEC Validation
Verify DNS record integrity and DNSSEC implementation. Detect propagation issues across global resolvers.
Email Authentication
Validate SPF, DKIM and DMARC so spoofed mail cannot be sent in your name — and policy gaps do not go unnoticed.
Code & Supply Chain
Scan for hardcoded secrets, vulnerable dependencies via the OSV database, and insecure Terraform, Kubernetes and Docker configuration.
Multi-Channel Alerts
Email and WhatsApp notifications configured to reach the right person at the right time. No alert fatigue.
67 free security tools
Check any domain, or scan your own code for secrets, vulnerable dependencies and insecure infrastructure — no account required.
Public IP, ISP, location & VPN status
Certificate validity, expiry & chain
Domain registration & expiry data
A, MX, TXT, NS, CNAME records
Inspect raw HTTP response headers
Email security & anti-spoofing setup
Live availability & response time
Sender Policy Framework lookup
DKIM signing record validator
Autonomous System Number info
Threat intel & blacklist check
PTR record & hostname lookup
Find hardcoded keys & credentials
Known CVEs in your packages + SBOM
Terraform, Kubernetes & Docker config
Decode & inspect JSON Web Tokens
Format, validate & minify JSON
Every email record, scored
Find subdomains via CT logs
Find missing intermediates
CVE & GHSA vulnerability search
What an anonymous caller sees
See all tools →Simple, honest pricing
The tools are always free. Pay only when you need ongoing monitoring.
- 20+ security tools, unlimited scans
- SSL, DNS, WHOIS, DMARC checks
- No signup for tool use
- Up to 3 domains monitored
- Email expiry alerts
- Everything in Free
- Unlimited domain monitoring
- WhatsApp alerts
- Daily automated checks
- Certificate chain history
- Priority support
Frequently asked questions
Still have questions? Contact us.
How does SSL certificate monitoring work?
CertNotify connects to your domain and inspects the SSL/TLS certificate — issuer, expiry date, certificate chain, and TLS version — when you add it to your dashboard. We re-check it automatically every day and alert you when expiry is approaching.
How far in advance will I be alerted before my SSL expires?
You receive alerts at 30 days, 14 days, and 7 days before expiry. You can adjust these thresholds in your dashboard settings.
Do I need an account to use the free tools?
No. All 20+ tools — SSL checker, DNS lookup, WHOIS, DMARC, SPF, DKIM, and more — are completely free with no signup required. An account is only needed for ongoing daily monitoring and alerts.
What is the difference between a one-time scan and monitoring?
A scan gives you an immediate report for a single check. Monitoring adds the domain to your dashboard where CertNotify re-checks it every 24 hours and alerts you automatically before anything expires or breaks.
Does CertNotify store my domain data?
We store the domain name and certificate metadata (issuer, expiry date, TLS version). We never log certificate contents or any private key material. See our privacy policy for the full details.
Can I receive WhatsApp alerts as well as email?
Yes. WhatsApp alerts are available on paid plans. Once connected, expiry warnings and downtime alerts are delivered directly in WhatsApp alongside your email notifications.
SSL & security guides
Fix errors, understand TLS, and harden your stack.
Start monitoring before something goes wrong.
Add your domains once. CertNotify watches them every day and alerts you well before any certificate expires or DNS change breaks your site.