CertRadar

CertRadar monitors certificates used across your network—load balancers, reverse proxies, VPN gateways, Wi‑Fi controllers, internal APIs, and on-prem apps—and alerts you before they expire or break trust chains. It continuously discovers cert endpoints by scanning known IP ranges and ingesting configs/logs, then normalizes everything into a single inventory with owners, renewal method, and blast radius. The app flags weak ciphers, mismatched SANs, missing intermediates, and unexpected issuer changes that often precede outages or MITM risk. For teams that can’t fully automate PKI, it provides practical workflows: assign ownership, set renewal runbooks, and track completion. It’s not a full CA replacement; it’s a focused “certificate hygiene” layer that reduces downtime and security incidents. Offer lightweight agents for segmented networks and a read-only mode to lower adoption friction.