Plan comparison
Every feature, every tier.
So you know exactly what you're getting before you commit.
| Personal | Starter | Pro | Business | Enterprise | |
|---|---|---|---|---|---|
| Pricing — all prices in USD; non-US cards billed in USD, your bank converts | |||||
| Monthly | Free | $19.99/mo | $49.99/mo | $129.99/mo | $0.625 / monitor/mo $250/mo minimum |
| Annual | — | $199/yr ($16.58/mo/mo) | $499/yr ($41.58/mo/mo) | $1,299/yr ($108.25/mo/mo) | $2,700/yr ($0.5625/monitor/mo, 10% off) |
| Billing | Free | Self-service | Self-service | Self-service | Invoice (annual) / Subscription (monthly) |
| Monitoring | |||||
| Monitors | 2 | 15 | 50 | 200 | Unlimited |
| Fastest poll interval | Daily | Hourly | 5 minutes | 5 minutes | 5 minutes |
| Available poll intervals | Daily | Hourly, 6h, 12h, Daily | 5m, 15m, 30m, 1h, 6h, 12h, Daily | 5m, 15m, 30m, 1h, 6h, 12h, Daily | 5m, 15m, 30m, 1h, 6h, 12h, Daily |
| Private pollers | — | 1 included | 3 included | Unlimited | Unlimited |
| Change history | ✓ | ✓ | ✓ | ✓ | ✓ |
| Certificate inventory a certificate-first view of every cert and where it's deployed — wildcards first, with renewal & multi-CA versions grouped so you catch a renewal an endpoint missed | ✓ | ✓ | ✓ | ✓ | ✓ |
| Response-time graphs | — | — | ✓ sub-hourly only | ✓ all intervals | ✓ all intervals |
| TLS hardening checks hostname-match, weak ciphers, deprecated protocols | ✓ | ✓ | ✓ | ✓ | ✓ |
| Mail, LDAP & database TLS SMTP / IMAP / POP3 STARTTLS, LDAP StartTLS, PostgreSQL, MySQL / MariaDB, Microsoft SQL Server — certs that hide behind a plaintext greeting | ✓ | ✓ | ✓ | ✓ | ✓ |
| Network access & wireless certs 802.1X / RADIUS server cert (EAP — Microsoft NPS, Cisco ISE, FreeRADIUS) and the Cisco CAPWAP wireless-controller cert — captured via a private poller | — | ✓ | ✓ | ✓ | ✓ |
| Custom monitor tags colored chips, filter + bulk-tag actions, ad-hoc groups for any cross-cut | ✓ | ✓ | ✓ | ✓ | ✓ |
| Network Discovery Scanner sweep a CIDR for TLS-bearing services, one-click add as monitors — HTTPS, mail, LDAP, databases, custom-port admin consoles | — | — | — | ✓ | ✓ |
| Certificate Lifecycle (CLM) — optional add-on: $10 / managed cert / mo · 2 deploy locations included per cert (pooled) · $1.50 / extra location | |||||
| Available as an add-on issue, renew & deploy — billed per managed cert, separate from your monitor plan | — | Add-on | Add-on | Add-on | Add-on |
| Automated issuance & renewal from any CA — Let's Encrypt, Google Trust Services, Sectigo, DigiCert, ZeroSSL, and many more, or internal Microsoft AD CS over SCEP / CES; renews ahead of expiry | — | ✓ | ✓ | ✓ | ✓ |
| Deploy to 15+ targets nginx, Apache, IIS, pfSense, TrueNAS, Microsoft NPS, Cisco IOS / Catalyst 9800 / ISE / CIMC, Dell iDRAC, HP JetDirect, generic SSH | — | ✓ | ✓ | ✓ | ✓ |
| Cisco ISE certificate automation admin, portal, EAP / RADIUS DTLS, SAML, pxGrid — imported over ISE's API, with the issuing CA auto-trusted first and the service restart handled | — | ✓ | ✓ | ✓ | ✓ |
| Keys never leave your network a local agent generates and holds the private keys; CertTracker is zero-knowledge of them | — | ✓ | ✓ | ✓ | ✓ |
| Maintenance windows & ordering restart-bearing deploys run only in your windows, criticality-ordered, with a manual override | — | ✓ | ✓ | ✓ | ✓ |
| Alerts | |||||
| Expiration alerts | ✓ | ✓ | ✓ | ✓ | ✓ |
| Change alerts | — | ✓ | ✓ | ✓ | ✓ |
| Per-monitor recipient lists | — | — | ✓ | ✓ | ✓ |
| Group / stack alerting tag related monitors as an app stack — recipients follow the stack, not the host | — | — | ✓ | ✓ | ✓ |
| Domain tracker | |||||
| Tracked domains owned + watching | 1 | 1 | 3 | 10 | Unlimited |
| Registrar / expiration / nameserver polling daily, RDAP + WHOIS | ✓ | ✓ | ✓ | ✓ | ✓ |
| Domain expiration alerts 60 / 30 / 7 day windows | ✓ | ✓ | ✓ | ✓ | ✓ |
| Registrar / nameserver change alerts flags unauthorized transfers | ✓ | ✓ | ✓ | ✓ | ✓ |
| Watched-domain available alerts drop-catch notifications | ✓ | ✓ | ✓ | ✓ | ✓ |
| Renewal DNS health checks the DNS that lets certs auto-renew — CAA vs the issuing CA, A/AAAA, _acme-challenge delegation — and alerts on drift | ✓ | ✓ | ✓ | ✓ | ✓ |
| DNS-01 renewal preflight simulate a CA's DNS-01 lookup across your authoritative nameservers, or run a real end-to-end test against Let's Encrypt staging | ✓ | ✓ | ✓ | ✓ | ✓ |
| DNS-health-only entries watch a subdomain's renewal DNS without registrar tracking — doesn't use a domain license | ✓ | ✓ | ✓ | ✓ | ✓ |
| Integrations — API documentation | |||||
| Read-only REST API bearer-token auth, monitor + advisory + TLS audit data | — | — | — | ✓ | ✓ |
| LibreNMS / Zabbix / Datadog adapter nagios-format check endpoint with copy-paste recipe | — | — | — | ✓ | ✓ |
| Team & Support — how support works | |||||
| Team members (account users) | 1 | 3 | 10 | Unlimited | Unlimited |
| Community + email support | ✓ | ✓ | ✓ | ✓ | ✓ |
| Ticket response | Staff discretion | Staff discretion | Best-effort | Priority (top of queue) | Priority (top of queue) |
| Start free | Start trial | Start trial | Start trial | Contact sales | |