CertSentry

CertSentry is a web app (with optional Slack/Teams alerts) that continuously monitors SSL/TLS certificates across domains, subdomains, APIs, and internal endpoints to prevent surprise expirations and broken trust chains. It discovers certificates via DNS, CT logs, and configurable network scans, then validates expiry, chain completeness, key strength, SAN coverage, and common misconfigurations (e.g., missing intermediates, wrong hostname, weak ciphers on edge proxies). It also tracks certificate ownership: who issued it, where it’s deployed, and when it last changed—so teams can actually assign responsibility. For modern stacks, it integrates with Kubernetes ingress controllers and major CDNs to detect drift between intended and live certs. This is not a “pretty dashboard” product; it’s an operational safety net that reduces incident risk and pager fatigue with actionable, low-noise alerts and runbooks.