About CertNotify

Our Mission

A product of Mallah Software Services Private Limited · Launched 2026 · Contact: alerts@certnotify.com

SSL certificate expiry is one of the most preventable causes of website downtime. Despite this, expired certificates cause outages for organizations of every size — from solo developers to large enterprises. The root cause is almost always the same: nobody was watching.

We built CertNotify after watching a colleague's production site go down for six hours because a Let's Encrypt renewal silently failed. The fix took minutes. The damage — customer trust, revenue, frantic Slack messages at 2am — took much longer to recover from. That should not happen to anyone.

CertNotify is the monitoring layer that teams were missing. It started with certificates, but the same problem — nobody was watching — turns out to apply to almost everything at the edge of a system. So the platform grew: domain registrations, TLS configuration, DNS and DNSSEC, email authentication, security headers, uptime, open ports, and Certificate Transparency logs. Then it grew inward too, into the code that produces those systems: hardcoded secrets, dependencies with known CVEs, and insecure Terraform, Kubernetes and Docker configuration.

Whatever the daily check finds, we tell you by email — or in Slack, Teams, Discord or a webhook on paid plans — so you hear about it before your users do.

We believe this kind of monitoring should not require a dedicated security team or expensive enterprise software. CertNotify is built to be simple enough for a solo developer, powerful enough for a security-conscious engineering team — and free to start.

CertNotify is built and operated by Mallah Software Services Private Limited, a company incorporated in India.

One Place, One Answer

Certificates, domains, DNS, email authentication and your code — checked in one platform, so nothing falls between tools.

Checked From Outside

Checks reach your domains from the internet, the way a visitor does, rather than from inside your network. They run from a single region, so they do not compare what users in different parts of the world see.

Privacy by Design

We never store certificate private keys or sensitive data. We only track the metadata you need for monitoring.

Independently Built

CertNotify is built and maintained by a small, independent team — no VC funding, no surveillance capitalism. We answer only to our users.

What We Monitor

SSL/TLS certificate validity and expiry — daily, emailed at the lead time you choose

Domain registration expiry — daily

The TLS version each site negotiates — daily, on paid plans

Six HTTP security headers — daily, on paid plans

Uptime — one request to each site per day, on paid plans

DNS record changes — daily, on paid plans

Certificate Transparency logs, for certificates from unexpected issuers — daily, on paid plans

Hardcoded secrets, vulnerable dependencies and insecure IaC — on every push to a connected repository, on paid plans

Mixed content, open ports, blacklists, lookalike domains and subdomain takeover — when you run them, on paid plans

Email authentication (SPF, DKIM, DMARC) and DNSSEC — with the free tools, whenever you check

Have a Question or Feedback?

We read every message. Reach out and we will get back to you within 24 hours on business days.