Is your SSL
about to expire?
Check any certificate in under a second.
Expiry, chain status, SANs, and more.
Why Xpiry
Never let a certificate expire again
Xpiry watches your certificates, uptime, DNS, redirects, and registrations, plus the cron jobs and metrics behind them, then pages whoever is on call when something breaks, so you don't have to.
SSL & TLS monitoring
Full handshake inspection on every check.
Uptime monitoring
Cross-region HTTP checks, down to every minute.
On-call & incident response
Schedules, escalation, phone & SMS. Cancel the PagerDuty bill.
Agency & client tools
Branded client portals, monthly PDF reports, unlimited seats.
Public status pages
Live uptime on your own domain.
Heartbeat & metric monitors
Catch the cron job that silently stopped.
Custom metrics & dashboards
SoonPush labeled metrics, query them, build your own dashboards.
Exception tracking
Point any Sentry SDK at Xpiry.
Synthetic browser checks
Verify a real login or checkout, not just a 200 OK.
Broken-link crawler & health endpoint
Find dead links, mixed content, and unhealthy internals.
DNS record monitoring
Catch a hijack the moment your nameservers move.
Redirect monitoring
Make sure http:// still lands on https://.
TCP, DNSBL & content checks
Watch ports, blocklists, and what's actually on the page.
Security scanning & grade
Headers, CAA, DNSSEC, CT logs: graded A+ to F.
Certificate change detection
Know the moment a cert changes, and why.
Domain registration expiry
RDAP-first, WHOIS fallback.
Multi-channel alerts
Email, Slack, Discord, webhooks.
REST API
Everything you can do in the dashboard, programmatically.
MCP server & CLI
Query your monitoring from Claude, Cursor, or the terminal.
Terraform provider
SoonManage monitoring as code.
Spotlight
Know the moment a cert changes, and why
Every SSL check compares the new certificate to the previous one and records what moved: issuer, SANs, public key, signature algorithm, validity window, chain status. If anything looks off — a SHA-1 downgrade, an unexpected CA swap, new hosts showing up in the SAN list — you get an alert with severity, and the diff is kept on the domain's history timeline.
- ● Weakened crypto → critical
- ● Rekey or issuer change → warning
- ● Chain became invalid → critical
- ● Renewal with same key → info
< 1s
Check speed
24/7
Monitoring
1 min
Min check interval