CertPingCertPing™

Enterprise PKI and certificate lifecycle management

Manage every certificate. Protect every trust surface.

CertPing discovers, issues, deploys, renews, and verifies certificates across cloud, Kubernetes, edge, and private infrastructure. Connect domain, DNS, website monitoring, anti-phishing, and trademark operations in one workspace.

Create your workspaceSee the certificate lifecycle

Post-quantum certificate migration

Plan PQC migration from a verified inventory.

CertPing builds a cryptographic bill of materials from certificate records, identifies quantum-vulnerable algorithms, connects them to owners and services, and organizes migration work around NIST-standard targets.

Review PQC readiness

Cryptographic estate

RSA key transport · ECDH · RSA signatures · ECDSA · long-lived signing

Control point

Inventory before migration

Connect cryptography to owners, services, data lifetime, and exposure.

Standardized targets

ML-KEM FIPS 203
ML-DSA FIPS 204
SLH-DSA FIPS 205

Certificate discovery and lifecycle

Discover certificates. Automate the lifecycle.

CertPing scans cloud, Kubernetes, edge, and private stores. Each discovered certificate enters the same governed lifecycle for ownership, issuance, deployment, verification, renewal, and revocation.

Review the PKI workflow

Discover

Find certificates where they actually run.

Scan connected infrastructure and resolve each certificate to its source, usage, and cryptographic identity.

  • Kubernetes

    aks-prod / ingress-nginx

  • Cloud vault

    production-tls

  • Edge gateway

    api-gateway

Discovered certificate

api.example.com

Kubernetes Secret · tls.crt

Issuer
Example Trust Services CA
Algorithm
RSA 2048 · SHA-256
Valid until
18 Oct 2026

Managed lifecycle

Keep the certificate moving before it expires.

Apply policy once, then coordinate issuance, deployment, verification, renewal, and history.

GovernIssueDeployVerifyRenew / revoke

Bound deployment targets

Cloud load balancers · application gateways · Kubernetes ingress

Domain registration and DNS

Register domains. Manage DNS.

CertPing searches domain availability, supports registration and transfer, and keeps renewal, privacy, registrar lock, nameservers, and DNS records in the same operating context.

Buy a domainExplore domain operations

Illustrative domain operating record

example.com

Active
Registrar lock enabled
Auto-renew onPrivacy onRegistrar lock on
Registration activeNameservers delegatedManaged zone authoritative

Registration

Status
Registered
Renews
18 Oct 2027
DNS provider
CertPing managed
Nameservers
2 authoritative

Managed DNS zone

example.com. · TTL 3600

4 records
  • @A203.0.113.10
  • wwwCNAMEedge.example.net.
  • mailMX 10mail.example.net.
  • @CAA 0issue "letsencrypt.org"

Registration state and zone changes remain connected to the same domain record.

Illustrative product concept showing domain ownership controls and DNS records together.

External trust perimeter

Trust extends beyond certificates.

CertPing connects the public records that establish identity, external signals that reveal impersonation, and availability and TLS checks that verify a service from outside its network.

PUBLIC TRUST OBJECT

northstar.example

Identity evidence

Application · registry · ownership

Abuse signals

Variations · WHOIS · DNS · TLS

Service verification

HTTP · response time · hostname

Trademark operations

Unify trademark applications and evidence.

Keep application details, website evidence, source records, attorney review, and status changes attached to the same trademark case.

Start a trademark application

CertPing organizes application and public-record evidence. Legal clearance requires review by qualified counsel.

ILLUSTRATIVE APPLICATION

NORTHSTAR

Attorney review

Application lifecycle

  1. Draft

    Complete

  2. Form uploaded

    Complete

  3. 3

    Sent to attorney

    Current

  4. 4

    USPTO review

    Next

Source-backed review record

TM-EXAMPLE

Trademark
NORTHSTAR
Mark type
Word mark
Website
northstar.example
Source record
USPTO search attached

Application details, source links, and review status remain attached to the same operating record.

Anti-phishing

Find the imitation. Keep the proof.

CertPing compares suspicious domains with the protected identity, then keeps registration, DNS, mail, and certificate evidence attached to the same investigation.

Create a phishing monitor
  1. 01

    Find the variation

    Protected name → look-alike

    Compare protected names with newly observed domains to surface confusable characters, inserted terms, and deceptive registrations.

  2. 02

    Correlate the evidence

    WHOIS · DNS · mail · TLS

    Keep registration, nameserver, mail, and certificate signals together so analysts can see whether the infrastructure belongs.

  3. 03

    Resolve with context

    Assign · escalate · dismiss

    Assign an owner, preserve the evidence trail, and record escalation, enforcement, or false-positive disposition.

Website monitoring

Monitor every layer of a website.

CertPing checks DNS, connection, TLS, server response, and page content from outside the service. Each alert identifies the first failing layer and keeps the endpoint evidence attached.

Create a website monitor
  1. 01

    DNS

    Resolve the hostname

  2. 02

    Connect

    Open the route

  3. 03

    TLS

    Validate certificate

  4. 04

    Response

    Measure HTTP result

  5. 05

    Content

    Confirm expected page

Every alert identifies the first failing layer and retains endpoint, response, and TLS context for the operator who receives it.

Enterprise controls

Control access to certificate operations.

Connect organization identity, permissions, scoped credentials, and audit history to certificate workflows. Availability varies by plan and deployment model.

Role-based access

Certificate view · create · audit view

Scope certificate and administration actions by responsibility.

Enterprise SSO

SAML · OIDC · organization sign-in

Connect organization sign-in through configured identity providers.

Team management

Teams · invitations · organization scope

Invite operators, group responsibilities, and keep organization context with each action.

Audit history

Policy evaluated · renewed · verified

Keep approvals, exceptions, lifecycle events, and operator actions.

Deployment control

Scoped credential · target binding

Use provider-specific credentials for connected stores and targets.

Infrastructure and workflow integrations

Connect PKI to your operations stack.

Discover and deploy certificates across supported cloud, DNS, cluster, load-balancer, and edge integrations. Send workflow updates to Slack or Microsoft Teams, escalate through PagerDuty, and create incidents in ServiceNow ITSM.

Lifecycle infrastructure

Discovery, DNS, and deployment
  • AWS
  • Microsoft Azure
  • Google Cloud
  • Cloudflare
  • Kubernetes
  • F5
  • Akamai
  • Namecheap

Operational destinations

Alerts and incidents
  • SlackCertificate events and support activity
  • Microsoft TeamsExpiry, deployment, and incident updates
  • PagerDutyOn-call escalation for critical issues
  • ServiceNow ITSMITSM incidents with operational context
Create workspace to connect

Pricing

Start free. Scale with use.

Use the free workspace for starter certificate and trust workflows. PAYG removes usage limits with clear monthly rates, while Enterprise aligns deployment and governance to your PKI operating model.

Ask about pricing

Discovery

$0

Forever free

Small teams proving the workflow

Get practical visibility into your certificate estate and start protecting the assets that matter most.

  • 1 managed TLS certificate with no CertPing platform fee
  • Cloud and Kubernetes certificate discovery
  • Post-quantum cryptography (PQC) readiness and CBOM inventory
  • 3 website monitors
  • 1 anti-phishing scan and 1 trademark scan
  • Email expiry alerts and team management
Start for free

Pay as you go

Most popular

$30

Per managed certificate

Growing certificate estates

Remove free-plan usage limits and add metered certificate, monitoring, anti-phishing, trademark, and domain services as needed.

  • $30 monthly per managed certificate
  • $1.99 monthly per website monitor
  • $1.99 monthly per anti-phishing monitor
  • $1.99 monthly per trademark monitor
  • Domain registration, renewal, and transfer pricing varies by domain
Start with PAYG

Enterprise

Custom

Tailored to your organization

Multi-team PKI standardization

Standardize PKI governance while the CertPing control-plane agent runs inside your infrastructure.

  • Control-plane agent hosted in your infrastructure
  • CertPing-hosted backend and web console
  • Custom issuer, approval, and policy workflows
Contact sales

CertPing fees cover the management platform and automation, not the certificate itself. Let’s Encrypt certificates remain free. GlobalSign and other certificate authority charges are billed separately. Domain registration, renewal, and transfer prices vary by domain and are shown before purchase. Final billing details are shown before activation.

Product questions

Common questions about CertPing.

Direct answers about PKI, domain operations, monitoring, brand protection, and post-quantum readiness.

What parts of the certificate lifecycle does CertPing manage?

CertPing covers discovery, issuance, validation, deployment, renewal, rotation, revocation, inventory, and policy governance across cloud, Kubernetes, edge, and private infrastructure.

Does CertPing replace my certificate authorities?

No. CertPing is the lifecycle and governance layer between supported public, private, and cloud certificate authorities and the infrastructure where certificates are deployed.

Can I buy a domain and manage DNS through CertPing?

Yes. The domain workflow covers availability search, registration, transfer, renewal, contacts, privacy, registrar lock, nameservers, DNS records, and email forwarding. Final registrar pricing is confirmed before purchase.

What is the difference between a trademark application and a scan?

An application records the mark, owner, goods or services, fees, consent, attorney assignment, and filing status. A scan collects USPTO, EUIPO, WHOIS, and domain evidence for review or ongoing monitoring. Scan results are not legal advice.

What does website monitoring check?

Website monitoring records external availability, HTTP or TCP status, response time, and TLS validity. The endpoint detail keeps certificate dates, hostname validity, cipher posture, redirect count, and recent incident context together.

What happens after a phishing look-alike is detected?

A finding moves through investigation, ownership, evidence capture, escalation, and disposition. Analysts can also mark false positives without losing the audit trail.

How does PQC readiness connect to certificates?

The cryptographic bill of materials maps key and signature algorithms to certificate records. The PQC report classifies deprecation status, harvest-now-decrypt-later risk, and remediation advice so teams can prioritize migration work.

Which notification and incident integrations are supported?

CertPing supports Slack and Microsoft Teams for channel updates, PagerDuty for on-call escalation, and ServiceNow ITSM for incident creation. Each integration is configured for the organization from the signed-in workspace.

PKI, domains, monitoring, and brand protection

Run trust operations from one workspace.

Start with certificate discovery or domain operations, then add lifecycle automation, post-quantum readiness, monitoring, anti-phishing, and trademark workflows as your program grows.

Create your workspaceDiscuss your architecture