CertHush

CertHush is a web + desktop agent app that continuously discovers, inventories, and monitors TLS certificates and private keys across endpoints, containers, and CI/CD artifacts. It flags risky patterns like long-lived certs, weak key sizes, self-signed certs in production, mismatched SANs, and keys accidentally committed to repos or baked into images. The app focuses on the unglamorous but common failure mode: expired or exposed certificates causing outages or enabling man-in-the-middle attacks. It provides a single dashboard for certificate ownership, renewal status, and where each cert/key is deployed, plus alerting to Slack/Teams and ticket creation. It’s realistic: it won’t “prevent all breaches,” but it will measurably reduce outages and credential exposure by tightening certificate hygiene and making ownership and rotation tractable for small security teams.