Sync monitoring with DNS zones
Connect
SPIRITT
Cert SpotterCert Spotter
No certificate goes unnoticed
SPIRITT keeps watch over every certificate issued for your domains. It adds new domains to Cert Spotter monitoring, authorizes the certificates and keys you expect, investigates unknown issuances in Certificate Transparency logs, and keeps a living certificate inventory for security and ops.
What you can do with Cert Spotter.
Every domain under watch
Monitoring kept in step with the domains you actually own, added and removed as they change.
Quiet for known, loud for unknown
Expected certificates and public keys authorized, so only unexpected issuance raises the alarm.
Investigations in minutes
Issuances by domain and subdomain with issuer, DNS names and certificate details.
Works with your other apps.
Get started in three steps.
01
Open your workspace
Start a SPIRITT workspace for certificate security and describe your domains and certificate providers.
02
Connect Cert Spotter
Connect Cert Spotter, plus your DNS, CDN and alerting apps.
03
Hand over the mission
Hand over the watch. SPIRITT keeps monitoring current and investigates every new certificate.
Hand over a mission.
Choose a mission. Make it yours.
Put Cert Spotter to work.
No certificate goes unnoticed
Questions
Cert Spotter, with SPIRITT.
01What does SPIRITT do with Cert Spotter?+
It manages monitored domains, authorizes known certificates and keys, and investigates issuances in Certificate Transparency logs.
02Can it find every certificate for a domain?+
It lists unexpired issuances for a domain, optionally with subdomains and wildcard matches.
03Can it silence expected certificates?+
Yes. It authorizes certificates by hash and public keys for given DNS names, so they no longer alert.
04Can it get certificate details?+
Yes. It retrieves issuance details including issuer, DNS names and the certificate itself.
05Can it keep monitoring in sync with DNS?+
Yes. It adds, updates and removes monitored domains based on your DNS records.
06How do I connect Cert Spotter?+
Open a workspace, connect Cert Spotter and your DNS and alerting apps, then describe your domains.