Built for Azure teams

Stop certificate outages before they happen

Certy monitors expiring SAML certificates, app secrets, and Azure AD credentials across every tenant — and alerts you days before production breaks.

No credit card required  ·  5-minute setup  ·  Cancel anytime

certy — dashboard
⚠ 2 Expired
Salesforce SAML — Production
Enterprise App · SAML Certificate
Expired 3d ago
GitHub Enterprise SSO
App Registration · Client Secret
4 days left
Azure API Management
App Registration · Secret
22 days left
Microsoft Teams Bot
App Registration · Secret
181 days left
2
Expired
1
Critical
1
Warning
24
Healthy
5 min
Average time to connect a tenant
30 days
Default alert horizon before expiry
5 – ∞
Azure tenants — Pro to Business
Features
Everything you need, nothing you don't

No agents to install. No YAML to write. Built for the Azure admin who's been paged at 2 AM because a SAML cert expired.

Multi-Tenant Dashboard

Connect every Azure tenant and see SAML certificates, app secrets, and key credentials in one unified view — with severity-ranked alerts.

Smart Alerts

Email and webhook alerts before anything expires. Configurable thresholds at 30, 14, and 7 days. Daily digest or instant notifications — your choice.

Expiry Timeline

See everything expiring over the next 12 months on a visual timeline. Know what needs attention this month versus what can wait.

History & CSV Export

Full check history with trend data. Export to CSV for compliance audits. Generate reports for stakeholders who want the paper trail.

Webhook Integration

Send alerts to any endpoint — Slack, Teams, PagerDuty, or your own systems. Configurable per-tenant with test delivery built in.

Team Access

Invite your whole team. Role-based access so admins manage billing and settings while members monitor and export.

Azure Key Vault

Now monitors Azure Key Vault certificates too — not just app registrations and enterprise apps. Certy reads only expiry metadata, never the certificate itself.

Your Credentials Stay Yours

Certy reads expiry metadata from the Microsoft Graph API — it never sees or stores certificate values, private keys, or secret contents. Your app registration's client secret is encrypted at rest with AES-256-GCM and used only to call the API on your behalf. How we handle credentials →

Setup
Running in under 5 minutes

No agents to install. No code to write. Just connect your Azure tenant and walk away.

01
Create an Azure app registration

In Azure AD, create an App Registration and grant it Application.Read.All permission. Takes 3 minutes.

Azure Portal → App Registrations → New registration
02
Connect your tenant to Certy

Paste your Tenant ID, Client ID, and Client Secret into Certy. Credentials are AES-256 encrypted at rest. Certy verifies the connection instantly.

Tenant ID · Client ID · Client Secret
03
Receive alerts automatically

Checks run on your schedule — hourly, daily, or weekly. Alerts arrive by email or webhook before anything expires.

Email · Webhook · Daily digest → your choice
Example alert: SAML certificate expiring in 7 days
Subject: 🔴 URGENT — Salesforce SAML certificate expires in 7 days · Contoso Corp tenant · App: Salesforce Production · Action required: renew before 15 Jun 2026 to avoid SSO disruption.
Sent via Certy · [email protected] · Manage alerts in settings
Two plans. No surprises.

Start with a 14-day free trial on either plan. Pay monthly, cancel anytime, and upgrade the moment you outgrow Pro.

Pro

For teams keeping their own Azure tenants healthy.

$19 /month
  • Up to 5 Azure tenants
  • Up to 5 team members
  • Daily certificate checks
  • Email + webhook alerts
  • Custom alert thresholds
  • Expiry timeline & CSV export

14-day free trial on any plan  ·  No credit card required  ·  Cancel anytime

Don't wait for production to break

The average Azure team discovers an expired certificate when users start getting locked out. Set up Certy once and never think about it again.

14-day free trial  ·  No credit card  ·  from $19/mo after