Plans & pricing
What's included on each plan, how limits work, and when to consider upgrading.
CertShield has four plans. They differ in how many endpoints you can monitor, how often CertShield re-checks them, how many people can be on your team, and which notification channels are available. The Billing page in the app always shows the current pricing and lets you compare side-by-side.
The plans
Hobbyist — free
- Up to 3 monitored endpoints.
- Solo account (1 user).
- Hourly endpoint re-checks.
- Email alerts only.
- Good for: personal projects, side projects, and kicking the tires on CertShield before committing.
Startup
- Up to 20 monitored endpoints.
- Solo account (1 user).
- Hourly endpoint re-checks.
- Email and Slack alerts.
- Good for: small teams with one person owning TLS, who want Slack notifications and more room to monitor staging + production.
Pro
- Up to 100 monitored endpoints.
- Up to 5 team members.
- Re-checks as often as every 15 minutes on priority domains; every 30 minutes otherwise.
- Email and Slack alerts.
- Auto-escalation during renewal windows.
- Good for: growing companies with a small platform team who need multi-user access and faster cycles on customer-facing domains.
Business
- Up to 500 monitored endpoints.
- Up to 20 team members.
- Re-checks as often as every 15 minutes across every priority tier.
- Email and Slack alerts.
- Auto-escalation and critical-priority scanning.
- Good for: larger certificate estates and teams who need deeper team management.
For current monthly/annual pricing, go to the Billing page in the app.
How the endpoint limit works
CertShield counts live, monitored endpoints, not domains or certificates. A single domain can have several live endpoints serving it (a load-balanced cluster, an admin hostname, a mail gateway, etc.) and each counts separately.
There is no separate limit on certificates. You can have thousands of certificates discovered for the domains you monitor — the limit is only about how many live endpoints CertShield is actively re-checking.
Archiving to make room
If you hit your endpoint limit, you have two options:
- Archive endpoints you don’t care about. Archived endpoints don’t count toward the limit and don’t generate alerts, but their history is preserved. Unarchive anytime.
- Upgrade your plan. Upgrades take effect immediately and your existing data stays intact.
See Endpoints for how archiving works.
Free trial
New accounts can start a 14-day no-credit-card Pro trial. During the trial you have full Pro features. When the trial ends, if you haven’t subscribed, your account automatically lands on the Hobbyist tier — nothing is deleted, but some features (additional endpoints beyond 3, Slack, team members, faster scans) turn off until you subscribe.
We email you before the trial ends so you have time to decide.