ChainCert

ChainCert is a web app (with optional CLI) that continuously audits your organization’s TLS/SSL certificate inventory across cloud, on-prem, CDNs, and Kubernetes ingress. It discovers certificates by scanning domains, load balancers, and cluster endpoints, then correlates them to owners, services, and deployment pipelines. The product focuses on the boring but costly failure mode: silent certificate sprawl, missed renewals, weak cipher suites, and misconfigured chains that cause outages or compliance findings. It provides renewal and rotation playbooks, alerts that are actually actionable (who owns it, what will break, how to fix), and change tracking so you can see when a pipeline introduced a bad TLS config. It’s a traditional app with a small AI layer used only for “next-step” remediation guidance and ticket summaries, not for core detection.