Catch failed certificate renewals before they turn into outages.
Public TLS certificates now last at most 200 days, then 100 days from March 2027 and 47 days from March 2029. Renewals that used to happen once a year will happen every few weeks. CertCadence tracks each endpoint's renewal pattern and alerts you when a renewal is late, not just when the certificate is about to expire.
Why CertCadence
Certificate renewal monitoring for the 47-day era. We're keeping it focused and affordable.
Alerts when a renewal is late
We learn each certificate's usual renewal cadence. If the ACME job that normally renews at day 30 hasn't renewed by day 35, you hear about it while there's still time to fix it.
Organized by client
Group endpoints by client or site, including firewalls, VPN portals, RD gateways, and LDAPS on odd ports. Each client gets its own white-label monthly report.
Find certificates you didn't know about
Certificate Transparency monitoring flags new certificates issued for your domains, so you find shadow IT and forgotten subdomains before they expire.
How it works
Three steps from signup to useful.
Import endpoints
Paste hostnames or upload a CSV, or connect Cloudflare DNS so new hosts are picked up automatically.
We check them constantly
We record each cert's issuer, chain, SANs, and expiry several times a day, and keep a history of past renewals.
Get the right alert
Alerts go to email, Slack, Teams, or a webhook into your PSA, with escalation if nobody acknowledges.
Founding members get the best price
CertCadence is in early development. Join the waitlist to help decide what we build first and lock in founding pricing.
Up to 250 endpoints across unlimited clients. Domain expiry checks included. Price locked for founding members.
Some per-certificate monitors charge around $70/mo for 200 certificates. We're aiming for a flat price that works for MSPs. Nothing is charged by joining the waitlist.
Questions
Have another question? Reply to the email you get after signing up.
Why not use Uptime Kuma or my RMM?
Those can tell you a cert expires in 14 days. They can't tell you that a renewal which should have happened 5 days ago didn't. At 47-day lifetimes, that early warning matters.
Do you need agents?
Not for public endpoints. A lightweight agent for internal-only certs is on the roadmap. Tell us on the form if you need it.
Does it renew certs for me?
No. We monitor and verify, and your ACME client or CA does the renewing. Keeping it read-only means we never need your private keys.
Privacy note
When you join the waitlist we store your email address, your answers to the form, the page that referred you, any campaign (UTM) tags in the link you used, and the time you signed up. We use this only to measure interest in CertCadence and to email you about it. We don't use advertising cookies or trackers on this page. Your data is stored with Cloudflare and is never sold or shared. To have your data deleted, reply to any of our emails or write to the address in our launch email, and we'll remove it.