A connected inventory
Group services by the certificate fingerprint they present. Explore issuer, validity, hostname and observation history.
INFRA / SSL / PRODUCT
The certificate.
The service.
The whole context.
Move from a list of expiry dates to a view of what is installed, where it is observed and which changes have been verified.
Discovery with a domain scope
Verify domain ownership, enroll a server, and discover local Nginx or IIS services. CT candidates and CSV import extend the inventory.
Windows and Linux agents
Download a dedicated package from the dashboard. Each installation has its own identity and can be revoked individually.
Controlled Nginx automation
Configure an HTTP-01 policy on the agent and approve that exact version in the dashboard before running a deployment.
Verification after change
Compare the expected certificate with an independent TLS observation, including hostname, validity and chain checks.
A workspace for your team
Use administrator, operator and viewer roles. Keep a certificate inventory distinct from the operational overview.
FROM DISCOVERY TO EVIDENCE
A workflow your team can follow.
Start with visibility. Enable controlled automation when the environment is ready.
- 01
Verify your domain
Publish a DNS TXT record to establish the domain scope.
- 02
Connect a server
Install an agent using a short-lived, single-use enrollment code.
- 03
Build your inventory
Discover Nginx or IIS services and group their observed certificates.
- 04
Approve and verify
Approve a local Nginx policy, then follow the job and its TLS verification.
A PRACTICAL FIRST STEP
Visibility first.
Automation with intent.
A discovered service does not grant permission to install certificates. Local configuration and administrative approval are separate steps.
Explore the security modelBEGIN WITH A CLEARER VIEW
Meet your certificate estate.
Explore what the beta can do, then connect a test environment through the dashboard.