Search & Stream the Global
Certificate Transparency Firehose
Real-time CT log streaming, historical certificate search, and webhook delivery. Build security tools on the world's largest certificate database.
264M+ Certs Indexed
Searchable certificate database
26M+ Certs/Day
Ingested from 40+ CT logs
10-Day Lookback
Growing daily toward 90-day depth
Webhook Delivery
Real-time filtered notifications
Search the global certificate database
Historical certificate search across all CT logs. Query by domain, issuer, SAN pattern, or date range with sub-second response times.
Historical certificate search across all CT logs
Query billions of certificates from 40+ Certificate Transparency logs with sub-second response times.
Search by domain, issuer, SAN pattern, date range
Flexible search filters let you find exactly the certificates you need across any combination of fields.
Deduplication of certificates and precertificates
Automatic deduplication ensures clean results without duplicate entries from precertificate and final certificate pairs.
CSV/JSON export of search results
Export search results in structured JSON for programmatic use or CSV for spreadsheet analysis and reporting.
Raw certificate data for your security tools
Full certificate JSON delivered to your endpoint in real-time. Every field, HMAC-signed, ready for SIEM ingestion and security automation.
Raw certificate JSON delivered to your endpoint
Full certificate data POSTed in real-time: all SANs, serial number, fingerprint, issuer chain, CT log source, and timestamps. Built for programmatic consumption.
HMAC-signed payloads for verification
Every payload is signed with HMAC-SHA256 so your ingestion pipeline can verify authenticity and reject tampered requests.
Route data feeds to your security tooling
Send raw CT data to your SIEM, security automation pipeline, or custom detection engine. Configure per-domain routing to different endpoints.
Guaranteed delivery with retry logic
Failed deliveries are automatically retried with exponential backoff, ensuring no certificate data is lost in your ingestion pipeline.
The full certificate stream
Access the complete unfiltered CT log stream — every certificate from every log, delivered in real-time via WebSocket or webhook.
Full unfiltered real-time CT stream (Coming Soon)
Access the complete Certificate Transparency firehose — every certificate from every log, in real-time.
WebSocket + Webhook delivery methods
Choose between persistent WebSocket connections for streaming or webhook POSTs for event-driven architectures.
Server-side domain filtering
Apply domain filters server-side to receive only matching certificates, reducing bandwidth and processing overhead.
Consumer group fan-out
Enterprise-grade fan-out architecture ensures reliable delivery to multiple consumers with at-least-once guarantees.
Built for developers, by developers
REST API, CLI tool, and comprehensive documentation. Get from zero to production in minutes, not weeks.
REST API with API key authentication
Simple API key authentication with per-key rate limiting, usage tracking, and instant revocation.
CLI tool for testing and debugging
Test your webhook endpoints, search queries, and API integration directly from the command line.
Rate limit dashboard (Coming Soon)
Monitor your API usage, rate limit status, and remaining credits in real-time from your dashboard.
Comprehensive API documentation
Complete OpenAPI spec with interactive examples, code snippets in multiple languages, and migration guides.
From API key to production in minutes
Three steps to real-time certificate intelligence.
Connect
Get your API key and start making requests. Search certificates by domain, issuer, or SAN pattern.
Subscribe
Configure webhook endpoints for your domains. We filter the CT firehose and POST matching certificates in real-time.
Build
Build security tools, threat intelligence feeds, or compliance dashboards with our structured certificate data.
The most developer-friendly CT data platform
See how CertWatch CT Intelligence compares to alternatives.
| Feature | CertWatch | SSLMate | Censys | crt.sh |
|---|---|---|---|---|
| Price | $79/mo | $50-1,500/mo | $100+/mo | Free |
| Historical Search | Slow | |||
| Webhook Delivery | ||||
| Real-time Streaming | Soon | $1,000/mo | ||
| Domain Filtering | Partial | |||
| SLA Guarantee | Implied | Enterprise | ||
| CLI Tool |
The only CT data platform with native webhook delivery