Attack-surface & certificate monitoring

Know What’s Exposed.
Fix What Matters.

CertNotify gives you one view of your internet-facing assets, applications and code — checking them continuously, ranking what it finds, and telling you what to fix before it becomes an incident.

Paste a domain and get a report straight away — no account, no card, nothing installed.

Up and running in under a minute

No complex setup. No agents to install. No credit card.

  1. 01

    Enter any domain

    You get an instant report on SSL validity, expiry date, TLS version, DNS records and email authentication. No account needed.

  2. 02

    Add it to monitoring

    Create a free account and add your domains. CertNotify re-checks them every 24 hours and logs what changes over time.

  3. 03

    Get alerted early

    Email or WhatsApp alerts at 30, 14 and 7 days before expiry — and immediately if DNS changes or the site goes down.

What it watches

From certificate discovery through to alerting — plus the code and configuration behind the site.

01

SSL/TLS certificates

Chain integrity, issuer details and expiry dates across every domain you add. Alerts fire at 30, 14 and 7 days, so a renewal never turns into a browser warning or an outage.

02

Domain expiry

Registration expiry tracked from live WHOIS data, so you hear about it before the domain lapses.

03

TLS configuration

Outdated TLS 1.0/1.1, weak cipher suites and misconfigured certificates, each with a remediation step attached.

04

DNS & DNSSEC

Record integrity and DNSSEC implementation checked against global resolvers, including propagation problems.

05

Email authentication

SPF, DKIM and DMARC validated so mail cannot be spoofed in your name and policy gaps do not sit unnoticed.

06

Code & supply chain

Hardcoded secrets, vulnerable dependencies from the OSV database, and insecure Terraform, Kubernetes and Docker configuration.

Free tools, no account

Check any domain, or scan your own code, without signing up for anything.

  • SSL Checker
  • WHOIS Lookup
  • DNS Lookup
  • DMARC & SPF Checker
  • DKIM Checker
  • HTTP Header Checker
  • Uptime Checker
  • Certificate Chain Checker
  • Subdomain Finder
  • Subdomain Takeover Checker
  • Lookalike Domain Finder
  • Secret Scanner
  • Dependency Checker
  • IaC Scanner
  • CVE Lookup
  • API Security Checker
  • IP Reputation
  • ASN Lookup
  • Reverse DNS
  • JWT Decoder
  • What's My IP
Use the tools ↗

The tools are free. Pay for monitoring.

Plans, current prices and limits live on the product site.

Free

$0/month

Everything you need to check a domain today.

  • Security tools, unlimited scans
  • SSL, DNS, WHOIS and DMARC checks
  • No signup to use the tools
  • Up to 3 domains monitored
  • Email expiry alerts
Get started free

Frequently asked questions

Do I need an account to use the tools?▼
No. The tools run without a signup. An account is only needed for ongoing monitoring, so that CertNotify has somewhere to keep your domains and send alerts.
How far in advance am I alerted before a certificate expires?▼
At 30, 14 and 7 days before expiry. You are also alerted immediately if DNS changes or the site stops responding.
What is the difference between a one-time scan and monitoring?▼
A scan is a snapshot: paste a domain, read the report, move on. Monitoring re-runs the checks every 24 hours, keeps a history of what changed, and sends the alerts.
Which channels can alerts reach me on?▼
Email on every plan, and WhatsApp on Pro.
Can it check code as well as domains?▼
Yes. Alongside the domain checks there are scanners for hardcoded secrets, known vulnerabilities in your dependencies via the OSV database, and insecure Terraform, Kubernetes and Docker configuration.

Check a domain now.

It takes a few seconds and costs nothing. If the report is useful, add the domain to monitoring and CertNotify keeps watching it.

Go to certnotify.com ↗