ChecksAutomated
Public-signal checks
CertPilot checks public SSL, DNS, RDAP/domain-expiry, email-authentication, and official vendor-status signals without private-system credentials.
SSL expiryDNS recordsDMARC / SPFRDAP / domainVendor status
IT Governance Evidence Platform
Prove your IT is under control — without enterprise GRC.
Daily public-signal checks on domains, SSL, DNS, and email authentication. Customer-maintained registers for renewals, vendors, people, assets, and access reviews. Turn both into management-ready evidence reports for lean IT teams, MSPs, agencies, and founders/operators.
- No credit card
- 14 days free
- Try free tools first — no login
Sample evidence · illustrative
C
Evidence / demoGovernance Evidence Pack
- Period
- Demo period
- Scope
- Demo workspace
- Source
- Checks + registers
External footprint — SSL, DNS, RDAP
Email authentication coverage
Renewal risk register
Access review completion
Illustrative workspace · no customer dataOperational evidence · not certification
Checks + Registers → Evidence
Two inputs. One dated evidence trail.
Public signals show what can be observed from outside. Maintained registers capture the operational context only your team knows. Neither half proves governance alone.
RegistersCustomer maintained
Operational registers
Your team enters or imports the owners, renewal dates, people, assets, systems, and review decisions that no public scan can know.
Renewals & vendorsPeople & accountsAssetsAccess reviewsSystems catalog
EvidenceManagement-ready
The evidence report
Checks and maintained records resolve into dated, plain-English reports with source, scope, ownership, and limits stated.
Domain and certificate health
From public checks
Renewal risk
From maintained register
Access review completion
From dated sign-off
See sample reports Evidence / output
The platform
Checks and registers in one workspace
Each module has one job: observe a public signal, maintain an operational record, or turn both into evidence. The architecture can grow without changing the model.
Public signalView module
External Footprint
Daily public checks plus customer-entered domain governance and sending-source context.
SSL · DNS · RDAP · EMAIL AUTH
RegisterView module
Renewals & Vendors
Maintain vendor, contract, licence, domain, certificate, owner, and renewal records.
RENEWALS · OWNERS · NOTICE DATES
RegisterView module
People & Accounts
Customer-maintained people and account records for ownership and offboarding evidence.
PEOPLE · ACCOUNTS · OWNERSHIP
RegisterView module
Assets Register
Record hardware, software, ownership, maintenance, and licence evidence without device monitoring.
HARDWARE · SOFTWARE · LICENCES
RegisterView module
Access Reviews
Use the Systems Catalog, access matrix, review states, and completion log to create dated evidence.
SYSTEMS · REVIEWS · SIGN-OFF
Public signalView module
Vendor Status Watch
Track cached official public vendor incidents and maintenance signals for operational context.
OFFICIAL FEEDS · INCIDENTS
See the workflow
From operational records to evidence you can hand over.
The product overview shows public checks, maintained registers, access reviews, and report output using a synthetic workspace.
Free IT admin tools
Useful public-signal checks — no account required
Run a focused utility before you sign up. Each selected tool uses public input and returns an operational result on screen.
Featured toolTOOL / 08 · Free · No login
IT Admin Change Calendar
Track upcoming retirements, end-of-support dates, and admin-impact changes across Microsoft 365, Google Workspace, Atlassian, and Apple.
Vendor & operations
Open change calendarOperational record
- Coverage
- M365 · Workspace · Atlassian · Apple
- Source
- Official first-party announcements
- Output
- Filtered CSV + ICS
Free toolTOOL / 01 · No login
CertPilot Watchtower
Check SSL expiry dates for up to 25 client domains and generate a shareable calendar feed.
Open WatchtowerFree toolTOOL / 05 · No login
Inbox Pulse
Check DMARC, SPF, MX, MTA-STS, TLS-RPT, and BIMI records across client domains.
Open Inbox PulseChange intelligence
Upcoming IT admin changes, before they land
Published records are source-backed against official vendor announcements and pass the same verification predicate used by the full calendar, detail pages, CSV, and ICS exports.
Published change records
Effective
1 September 2026
In 7 days
Microsoft 365Microsoft Entra IDSecurity change
Entra ID makes passkeys the default and retires Microsoft-provided SMS/voice MFA
From September 1, 2026 Entra ID auto-enables passkeys for SMS/voice MFA users; Microsoft-provided SMS and voice retire on February 1, 2027.
HighAction required
Effective
8 September 2026
In 14 days
AtlassianAtlassian AnalyticsRetirement
Atlassian Analytics dashboard subscriptions are removed in late 2026
Atlassian Analytics stops new dashboard subscriptions on September 8, 2026 and removes emailed dashboard reports on November 2, 2026.
CriticalAction required
Effective
30 September 2026
In 36 days
Microsoft 365Project OnlineRetirement
Project Online retires on September 30, 2026
Microsoft retires Project Online on September 30, 2026. Project Web App sites and data become unavailable, so migrate projects before then.
CriticalAction required
Published records only · needs-review records never render
See all changesEvidence reports
Send proof, not screenshots
Reports are the product output: dated, readable artifacts generated on demand from public checks and customer-maintained registers.
Domain Health
SSL, DNS, domain-expiry, and email-authentication evidence.
Renewal Risk
Upcoming renewals, notice windows, owners, and open decisions.
Monthly Proof
A dated monthly summary including DNS change evidence.
Weekly Governance
An on-demand governance summary; not an automated weekly delivery.
Access Review Register
A dated register and completion record for access-review work.
Governance Evidence Pack
A cross-module management packet from checks and maintained registers.
C
Evidence / demoGovernance Evidence Pack
- Period
- Demo period
- Scope
- Demo workspace
- Source
- Checks + registers
External footprint — SSL, DNS, RDAP
Email authentication coverage
Renewal risk register
Access review completion
Illustrative workspace · no customer dataOperational evidence · not certification
Resources
Guides for teams that need IT governance evidence
Practical articles on checks, customer-maintained registers, and management-ready evidence reports.
Start hereIT Governance Evidence
Checks + Registers → Evidence Reports: A Simple Governance Model for Lean IT Teams
Use public-signal checks and customer-maintained registers to create dated IT evidence reports with scope, owners, and limits.
Updated 21 Aug 2026
Read the resourceAccess Reviews
Access Review Completion Log: What to Record at Sign-Off
Record access review sign-off with reviewer, date, period, cadence, scope counts, open actions, next due date, and evidence notes.
Read articleRenewal Ledger
How to Track Auto-Renewing Subscriptions Without Losing Control
Track auto-renewing subscriptions with renewal dates, notice deadlines, owners, decisions, cancellation paths, and review evidence.
Read articleClear product boundary
Built on public signals and your own records
CertPilot gathers operational evidence. It does not surveil people, read private content, or judge compliance on your behalf.
CertPilot does
- Use public-signal checks for domains, SSL, DNS, email authentication, and vendor status
- Store customer-maintained operational registers
- Produce management-ready operational evidence reports
- Keep people responsible for reviewing and acting
CertPilot does not
- Scan email, document, chat, or other private content
- Monitor employee activity or productivity
- Provide compliance certification, legal advice, or audit guarantees
- Provide vulnerability scanning or automatic remediation
- Connect to Microsoft 365 or Google Workspace today
A note from Alex: I built CertPilot so lean teams can keep evidence without losing the work across spreadsheets, inboxes, and memory. Early customer email reaches me directly at alex@certpilot.app.
Pricing
Priced by workspace capacity
Users are not the meter. Workspace capacity is based on tracked items: domains, renewals, vendors, people, accounts, assets, systems, and access-review entries.
Starter
€99/month
For one lean team moving the first evidence workflow out of spreadsheets.
Included capacity
Up to 100 tracked items
- Tracked items include domains, vendors, people/accounts, assets, systems, and access-review entries
- Single workspace for one company, client, or internal team
- Designed for a small, controlled evidence register
- Daily SSL, DNS, domain-expiry, and email-authentication checks
- All registers included: renewals/vendors, people/accounts, assets, systems, access reviews
- CSV import and export on every register
- All six evidence reports, generated on demand
- Daily digest email
Professional
€199/month
For MSPs, agencies, and growing IT teams with several clients, departments, or business units.
Included capacity
Up to 250 tracked items
- Tracked items include domains, vendors, people/accounts, assets, systems, and access-review entries
- Client, department, or business-unit grouping
- Best fit when evidence is reviewed on a regular cadence
- Everything in Starter
- Branded evidence reports with your logo and brand color
- More room for recurring quarterly and monthly reporting
- Import help for the first structured register
Portfolio
€299/month
For heavier evidence volume across larger domain portfolios and multiple operating registers.
Included capacity
Up to 500 tracked items
- Tracked items include domains, vendors, people/accounts, assets, systems, and access-review entries
- Best fit for larger client rosters or multi-entity workspaces
- Custom capacity should be quoted separately before import
- Everything in Professional
- Priority support and larger import assistance
- More headroom for access-review and asset-heavy workspaces
- Founder review before any custom-capacity discussion
Start with a 14-day free trial. No credit card required. Upgrade when the workspace reaches its tracked-item capacity.
Tracked items means the combined total across monitored domains, renewals/vendors, people/accounts, hardware/software assets, systems, and access-review entries. Higher-capacity workspaces should be quoted separately instead of silently stretching a low-price plan.
FAQ
Product questions
Exact answers about current scope, imports, reports, connectors, and plan capacity.
What does CertPilot actually help me do?
CertPilot helps a lean IT team keep the recurring governance records in one place: public domain checks, renewal ownership, vendor and software records, people and account records, assets, access-review states, and dated PDF evidence reports. It is for the work that usually lives across spreadsheets, inboxes, calendar reminders, and one person's memory.
Which records can I track inside the workspace?
The live workspace covers domains, SSL/DNS/email-authentication checks, renewals and vendors, people and accounts, hardware and software assets, systems, and access-review entries. Pricing is based on tracked-item capacity, so a domain, vendor, person/account, asset, system, or access-review entry all count toward the plan limit.
What reports do I get?
Six on-demand report types: Domain Health, Renewal Risk, Monthly Proof, Weekly Governance, Access Review Register, and Governance Evidence Pack. They are built for management, client, insurance, and audit-preparation conversations where a dated, readable artifact is more useful than another dashboard screenshot.
Can I import what I already have?
Yes. CertPilot is manual-first and CSV-friendly. Start from your existing domain list, renewal spreadsheet, people/accounts export, asset list, or access-review sheet, then clean the records into structured registers. You can also export the data back to CSV, so the workspace is not a data trap.
Does CertPilot discover SaaS apps, users, or devices automatically?
No. CertPilot has no Google Workspace, Microsoft 365, HRIS, finance, MDM, RMM, inbox, contract-parsing, or device-discovery connector today. Teams enter or import register records themselves. That keeps the access surface smaller, but it also means CertPilot is not a replacement for an IAM, IGA, MDM, ITAM, or SaaS-discovery platform.
How is CertPilot different from a spreadsheet?
A spreadsheet is better for blank-canvas analysis. CertPilot is better when the same records must be reviewed repeatedly, assigned to owners, checked against public signals, turned into reminders, and converted into PDF evidence. The point is not to replace every spreadsheet; it is to stop important governance records from depending on manual formatting and memory.
How is CertPilot different from uptime, SSL, or domain monitors?
Those tools are usually alerting systems. CertPilot includes daily public checks for SSL, RDAP/domain expiry, DNS, and email authentication, but the broader job is governance evidence: who owns the domain, what changed, what renews soon, what was reviewed, and what report can be shared. CertPilot deliberately does not monitor uptime or response time.
How should I choose a plan?
Choose by tracked-item capacity, not by vague company size. Starter fits a small controlled workspace. Professional fits several clients, departments, or business units that need branded reports. Portfolio adds more room for heavier evidence volume. If the workspace will exceed the plan limit, the honest answer is to upgrade or discuss custom capacity before importing everything.
Start with the evidence
Checks, registers, and reports — in one evidence workflow.
Turn on public-signal checks, maintain the operational records your team already owns, and generate evidence a client, a boss, or an auditor can read.
Questions? Email hello@certpilot.app.
- 01Try free tools — no login
- 02Add domains and maintained registers
- 03Generate an on-demand evidence report