Everything You Need to Prevent SSL & Domain Downtime
Engineered for developers, DevOps teams, and sysadmins. Stay ahead of expired TLS certificates, broken trust chains, and lapsed domain registrations with automated continuous monitoring.
SSL & TLS Certificate Monitoring
Automated bi-daily scanning for Let's Encrypt, ZeroSSL, and custom SSL/TLS certificates. Detect impending expirations, intermediate certificate chain issues, weak ciphers, and missing OCSP stapling before users see browser warnings.
- Tracks 90-day Let's Encrypt and rapid 45-day cert lifecycles
- Deep validation: Full chain, Root CA, and OCSP Stapling
- Custom TCP port support (443, 8443, mail ports)
Domain Expiry & WHOIS/RDAP Monitoring
Never lose a company domain to expired credit cards, missed registrar emails, or registrar renewal glitches. ExpiryHawk queries official ICANN RDAP endpoints and WHOIS servers to track exact registration lifecycles.
- Modern RDAP protocol parsing with fallback WHOIS scraping
- Multi-staged renewal warnings: 60, 30, 14, 7, and 1 day remaining
- Tracks registrar status locks (clientTransferProhibited, redemption)
Multi-Channel Alerting (Telegram, Webhooks, Email)
Cut through inbox noise with high-priority notifications sent directly to where your engineering team communicates. Get real-time alerts on Telegram, Slack, Discord, Microsoft Teams, or custom HTTP Webhooks.
- Native Telegram bot integration for instantaneous mobile push alerts
- Custom JSON Webhooks compatible with Slack, Discord, and PagerDuty
- Granular milestone triggers: 30, 14, 7, and 1 day remaining
Passkey & WebAuthn Security
Protect your production monitoring assets with cutting-edge passwordless authentication. Support for Touch ID, Face ID, Windows Hello, and hardware security keys (YubiKey) with zero shared secrets.
- 100% phishing-resistant public-key cryptography
- Hardware token support: YubiKey 5 Series, Feitian, SoloKeys
- TOTP two-factor backup for universal compatibility
Powered by a Dedicated Go SSL Engine & Async Job Queue
Unlike slow Python or PHP checkers that choke on timeout issues, ExpiryHawk leverages an optimized, concurrency-native Go microservice (ssl-checker-go) backed by Mojolicious Minion background workers. Certificates are inspected in parallel with zero impact on dashboard responsiveness.
Why DevOps Choose ExpiryHawk
See how our purpose-built SSL & domain tracking stacks up.
| Capability | ExpiryHawk | Typical Uptime Monitors | Manual Calendar Reminders |
|---|---|---|---|
| Automated SSL Expiry Alerts | Bi-daily (30, 14, 7, 1d) | Basic or Paid Addon | Prone to human error |
| Domain Expiry & RDAP / WHOIS | Included (gTLDs & ccTLDs) | Rarely supported | Often forgotten after 1-2 yrs |
| Telegram Bot Notifications | Instant mobile push | Email only or expensive tier | — |
| Custom Webhooks (Slack/Discord) | Standard JSON Payloads | Paywalled feature | — |
| Passkey & WebAuthn Authentication | Biometric + YubiKey ready | Password only | — |
| Free Tier Allowance | 20 Domains Free Forever | 1-5 domains trial only | — |
Ready to secure your certificates and domains?
Join hundreds of developers safeguarding their infrastructure with ExpiryHawk. Setup takes less than 60 seconds.