Documentation
Get started with CertControl
Step-by-step guides to help you set up the platform, monitor your certificates, and stay ahead of expiry.
Getting started
Add your first endpoint
Connect a domain or IP address and run your first certificate scan in under two minutes.
Set up expiry notifications
Configure email and webhook alerts so you never miss a certificate renewal.
Invite team members
Add colleagues and assign roles so your whole team has visibility.
Install the on-premise agent
Scan internal networks behind the firewall using the lightweight CertControl agent.
Generate a report
Export executive summaries, risk reports, and expiry forecasts as PDF.
Create an API key
Generate a personal access token to integrate CertControl with your own tools and scripts.
Features
Subdomain Discovery
Find every subdomain via CT logs, check DNS resolution, and detect dangling records before attackers do.
CT Monitor
Get alerted whenever a new certificate is issued for your domains — catch unauthorised issuances the moment they appear.
Phishing Detection
Detect lookalike and typosquatting domains targeting your brand using homoglyph analysis and CT log monitoring.
Certificate Tools
Decode certificates, verify key pairs, convert formats, inspect keystores, and generate CSRs — all built in.