Powerful Features
Everything you need for enterprise-grade certificate management.
Active Discovery
Automatically perform SSRF-protected active scans of your target hosts. Our engine pre-resolves hostnames to block internal, link-local, multicast, or loopback IP ranges (RFC 1918 / RFC 4193) before connection, mitigating both SSRF and DNS Rebinding threats.
Passive Monitoring
We subscribe to global CertStream WebSocket logs in real-time. Match certs instantly against monitored domains with zero-latency passive discovery.
AI Diagnostics
Generate detailed, copy-pasteable configuration fixes with Gemini AI for any TLS errors, reducing Mean Time to Resolution (MTTR).
Intelligent Alerting
Receive notifications via Slack or Email. Custom thresholds ensure you're alerted exactly when you need to be.
Security Audits
Detailed compliance logs of every issuance, status change, and discovery event with server-side pagination, user mappings, action filters, and CSV downloads.
Brand Protection
Identify malicious brand impersonation and typosquatting attempts automatically using vector similarity checks on global Certificate Transparency logs.
Infrastructure Visibility
Stop relying on spreadsheets. CertificateGuardian provides a unified dashboard for all your domains, hostnames, and certificate configurations.
- ✓Unified certificate inventory
- ✓Active & Passive host discovery
- ✓Real-time dashboard updates
