From free developer access to enterprise-grade firehose streaming
Full unfiltered real-time CT stream. 20M+ certs/day via WebSocket or webhook.
Requires Business or Enterprise tier
Detailed breakdown of what's included in each plan.
| Feature | Free | Developer | Pro | Business | Enterprise |
|---|---|---|---|---|---|
| Search API | |||||
| API calls/day | 100 | 500 | 5,000 | 10,000 | Unlimited |
| Search lookback | 2 days | 7 days | 30 days | 90 days | Custom |
| Search by domain | |||||
| Search by issuer | |||||
| CSV/JSON export | |||||
| Bulk export | Soon | Soon | |||
| Data Feeds | |||||
| Domain data feeds | 1 | 5 | 25 | Unlimited | Unlimited |
| HMAC signatures | |||||
| Retry logic | |||||
| SIEM data routing | |||||
| Firehose | |||||
| Full CT stream | Soon | Soon | |||
| WebSocket delivery | Soon | Soon | |||
| Platform | |||||
| Rate limit (req/sec) | 1 | 5 | 10 | 20 | Custom |
| API key auth | |||||
| CLI tool | |||||
| Commercial use | |||||
| SLA | 99.9% | ||||
Credits never expire
The most affordable CT data platform with native data feeds
Everything you need to know about CT Intelligence API.
CT Intelligence API is a data platform — it lets you search ALL certificates globally and delivers raw certificate JSON to your endpoint for SIEM ingestion, security automation, and programmatic analysis. Certificate Monitoring is an operational tool — it watches YOUR domains for expiry, misconfigurations, and CT activity, sending human-readable alerts through Slack, Email, or PagerDuty. One gives you raw data for your security pipeline, the other gives you actionable notifications for your team.