Pricing
Simple, transparent pricing for monitoring and automation.
Start by monitoring your certificates. Upgrade to full lifecycle automation when you’re ready to renew, deploy, and manage certificates automatically.
Choose your starting point
Two paths. One platform.
Discover → Monitor → Automate. Pick the path that matches where you are today.
Monitor
Monitor certificates.
Discover, inventory, and monitor certificates before they expire or cause outages.
Start free. Discover your certificate footprint in under 60 seconds. No credit card required.
Free
$0forever
Discover and monitor public certificates.
Best for evaluation.
Monitored certificates
2
25 Discovered
Visibility
- ✓ Public certificate discovery
- ✓ CT log monitoring
- ✓ Basic inventory
Alerts
- ✓ Expiration alerts (email)
Starter
$29/ month
Simple monitoring for small teams.
Best for small businesses and first production deployments.
Monitored certificates
30
300 Discovered
Visibility
- ✓ Everything in Free
- ✓ Change monitoring
- ✓ Chain validation
- ✓ Revocation monitoring
Alerts
- ✓ Renewal alerts
- ✓ Slack + Teams alerts
Team
- ✓ 3 users
Most popular
Growth
$99/ month
Professional monitoring at growing scale.
Best for growing IT and security teams.
Monitored certificates
150
1,500 Discovered
Visibility
- ✓ Everything in Starter
- ✓ Advanced risk score
- ✓ 47-day TLS readiness
- ✓ Shadow cert discovery
Integrations
- ✓ Webhooks + API
Reporting
- ✓ Executive dashboard
Team
- ✓ 10 users
Best for security teams
Business
$299/ month
Visibility, governance, and compliance.
Best for security and compliance teams.
Monitored certificates
500
5,000 Discovered
Everything
- ✓ SSO / SAML
- ✓ Advanced RBAC
Compliance
- ✓ Compliance dashboard
- ✓ Audit reporting
Visibility
- ✓ Agent + internal discovery
- ✓ DNS + regional sync
Integrations
- ✓ ServiceNow / Jira / SIEM
Team
- ✓ 25 users
Enterprise
Enterprise
For large-scale environments, MSPs, regulated industries, and private deployments.
- ✓ Unlimited monitored + discovered certificates
- ✓ Air-gapped / private cloud / on-prem
- ✓ Federal and regulated industries
- ✓ MSP and multi-tenant deployments
- ✓ Custom integrations + custom SLAs
- ✓ Dedicated support and enterprise security review
Which plan?
Which plan is right for me?
Choose Monitoring if…
You need visibility into certificates.
You want alerts before expiration.
You are not ready to automate renewals.
Choose CLM if…
You manage certificate renewals.
You need deployment automation.
You are preparing for 47-day TLS.
You want to eliminate manual certificate operations.
Not ready yet?
Start with a free account.
Monitor up to 2 certificates, discover up to 25. Forever free, no credit card.
Explore MachineCert FreeFAQ
Frequently asked questions
A monitored certificate is one MachineCert actively tracks for expiry, risk, chain health, and changes. Your plan’s monitored-certificate count is the number you can keep under active monitoring; discovered certificates (a larger number) are surfaced by discovery but not all actively monitored.
A managed certificate is one MachineCert automates end to end — renewing, deploying, and rotating it through CLM. Managed certificates are counted under your CLM plan and always include monitoring.
Yes. Every CLM plan includes the full monitoring and discovery feature set. Monitoring finds the problems; CLM fixes them automatically. You don’t need a separate monitoring subscription.
No. You can start directly on a CLM plan — monitoring is built in. Many teams begin with Monitoring for visibility and upgrade to CLM when they’re ready to automate, but it isn’t required.
Discovered certificates are all the certificates MachineCert finds across your public, cloud, and internal sources. Discovery is broad; the monitored/managed counts define how many you actively track or automate on your plan.
Yes. A wildcard certificate (e.g. *.example.com) counts as a single certificate against your plan, regardless of how many subdomains it covers.
Yes. A certificate with multiple Subject Alternative Names counts as one certificate, no matter how many hostnames are listed on it.
Neither. Pricing is based on the number of certificates monitored or managed — not per domain, per endpoint, or per deployment of the same certificate.
Yes. The Free plan lets you discover up to 25 certificates and monitor up to 2, forever, with no credit card required.
No. The Free plan and discovery scan require no credit card. You only add payment details if you move to a paid plan or start a trial that requires it.
At the end of a trial you can choose a paid plan to continue, or drop back to the Free plan. Your inventory and history are preserved either way.
Stop renewing
one cert at a time.
Free forever for up to 2 certificates. No credit card.