Client websites, certificates and domains, one group per client

One agency, many client domains and certificates, a group per client with its own thresholds and channels. hostnag gives every client a white-labelled status page and keeps each certificate and domain watched without a spreadsheet of renewal dates.

Start free

The plan that fits: Pro.

What Agencies watch
What breaks	hostnag
A certificate expiresdays-before thresholds, daily inside the last window	Yes
A domain lapsesregistration expiry from RDAP	Yes
A certificate is swappedfingerprint changed, wrong host, chain not trusted	Yes
Your nameservers or registrar changenameservers, registrar, DNSSEC, certificate issuer, DNS answers, redirect targets	Yes

The board

The overview over sample data. Press LAMP TEST; switch the view.

Active06

Alarm: 01
Supervisory: 02
Trouble: 00
Normal: 03
Unlit: 00

View

Acme Retail

06Sample data

DownHTTP

Checkout API

api.acme.example/health

Down47 min

checked 1 min ago

Expiring soonCert

mail.example.com

11d left10 Oct 2026

checked 40 min ago

UpTCP

VPN gateway

vpn.office.example

31ms

checked 2 min ago

OKDomain

example.com

40d left08 Nov 2026

checked 9 h ago

UpDNS

MX example.com

example.com

18ms

checked 4 min ago

DegradedHTTP

Storefront

shop.acme.example

1840msslow for 22 min

checked 1 min ago

How it is set up

01
One group per client
Every certificate and domain watched for a client lives in its own group, with its own thresholds and its own channels.
02
Turn on the client's status page
A public status page per group, with the hostnag byline hidden once the org's plan includes white labelling.
03
Watch the certificate chain as well
A swapped fingerprint, a hostname the certificate no longer covers, or a chain that stops validating each raise their own alert, on top of the expiry countdown.
04
Watch the registration too
A domain that lapses, or a nameserver, registrar or DNSSEC change nobody expected, each get their own alert alongside the client's certificates.

The plan that fits

Monitors: 100
More monitors: Up to 4 packs of 100
Groups: 25
Seats: 10
Locations: 3
Fastest interval: 1 min
Channels: Email, Slack, Discord, Microsoft Teams, Telegram, Webhook, PagerDuty, Opsgenie
History: 90 days
Reports: 3 months
Scoped viewers: Yes

Questions

Can a client see their own status page without seeing our other clients?

Yes. Each group gets its own public status page, and a client invited as a viewer scoped to that group cannot see any other group in the org.

Do clients need to install anything for us to watch their certificates?

No. hostnag reaches most certificates directly from the cloud; one it cannot reach can be pasted or posted to a minted report URL instead.

Features that matter

Certificate monitoringEvery certificate hostnag can reach is watched for expiry, a swapped chain and a renewal that should already have happened; the ones it cannot reach get a URL to report to instead.Domain monitoringEvery domain's registration watched for lapsing, a registry hold or a blocked renewal, plus whether its nameservers answer for it and agree, and whether its DNSSEC signatures are still fresh.DNS monitoringThe records that point people and mail at your systems, watched for drift from the answer you told hostnag to expect.Tools and assessmentsAny check run once from one address box, and a client review or an audit kept as an assessment: your notes and verdicts, run again for a before and after, printed, shared or exported.Discovery and subdomain watchEvery name under a domain, found in its own DNS, its homepage and the names people usually use, each judged live, gone or pointing nowhere, with the ones anyone could claim listed first. A subdomain watch looks again every day and alerts on what changed.

Add a host. Hear about it first.

Start free