Skip to content

CertWatch v0.1.0 — first release

Choose a tag to compare

View all tags
@nizartuanku nizartuanku released this 16 Aug 10:11
· 35 commits to main since this release
v0.1.0
e984813
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First public release of CertWatch — self-hosted TLS & certificate monitoring with configuration grading.

Free edition: monitor up to 10 hosts, webhook notifications, 7-day history. This build has no license activation — it is the permanent free edition.

Install

tar xzf certwatch-0.1.0-free-linux-amd64.tar.gz
./certwatch
# open http://127.0.0.1:8422 and add your first host

Verify the download: sha256sum -c SHA256SUMS

What it checks

Expiry (staged 30/14/7/1-day severities), expired certs, hostname mismatch, untrusted/self-signed chains, missing intermediates, obsolete protocols, a legacy TLS 1.0/1.1 acceptance probe, weak ciphers, weak keys, and SHA-1 signatures. Every finding ships with its remediation, deduplicates across scans, and auto-resolves when fixed.

Pro/Team editions (more hosts, Slack/Telegram, custom intervals, longer history): whop.com/nizar-tuanku/certlight-tls-monitor

Assets 4
Loading