Client websites, certificates and domains, one group per client

One agency, many client domains and certificates, a group per client with its own thresholds and channels. hostnag gives every client a white-labelled status page and keeps each certificate and domain watched without a spreadsheet of renewal dates.

Start free

The plan that fits: Pro.

What Agencies watch
What breaks	hostnag
A certificate expiresdays-before thresholds, daily inside the last window	Yes
A domain lapsesregistration expiry from RDAP	Yes
A certificate is swappedfingerprint changed, wrong host, chain not trusted	Yes
Someone issues a certificate for your domainnew certificates in the transparency logs, daily	Yes
Your nameservers or registrar changenameservers, registrar, DNSSEC, certificate issuer, DNS answers, redirect targets	Yes

How it is set up

01
One group per client
Every certificate and domain watched for a client lives in its own group, with its own thresholds and its own channels.
02
Turn on the client's status page
A public status page per group, with the hostnag byline hidden once the org's plan includes white labelling.
03
Watch the certificate chain, not just the expiry date
A swapped fingerprint, a hostname the certificate no longer covers, or a chain that stops validating each raise their own alert, on top of the expiry countdown.
04
Watch the registration too
A domain that lapses, or a nameserver, registrar or DNSSEC change nobody expected, each get their own alert alongside the client's certificates.

The plan that fits

Monitors: 50
Groups: 10
Seats: 5
Locations: 3
Fastest interval: 1 min
Channels: Email, Slack, Discord, Microsoft Teams, Telegram, Webhook
History: 90 days
Reports: 3 months
Scoped viewers: Yes

Questions

Can a client see their own status page without seeing our other clients?

Yes. Each group gets its own public status page, and a client invited as a viewer scoped to that group cannot see any other group in the org.

Do clients need to install anything for us to watch their certificates?

No. hostnag reaches most certificates directly from the cloud; one it cannot reach can be pasted or posted to a minted report URL instead.

Features that matter

Certificate monitoringEvery certificate hostnag can reach is watched for expiry and a swapped chain; the ones it cannot reach get a URL to report to instead.Domain monitoringEvery domain's registration watched for lapsing, plus who holds the nameservers and whether DNSSEC is still switched on.DNS monitoringThe records that point people and mail at your systems, watched for drift from the answer you told hostnag to expect.Certificate transparency watchEvery certificate anyone issues for your domain, watched in the public logs before you'd otherwise hear about it.

Add a host. Hear about it first.

Start free