Red Sift Certificates provides two tiers: Lite and Enterprise. While Certificates Lite provides basic expiration monitoring, the Enterprise tier offers advanced discovery and monitoring across all your certificates, identifying expired, misused, or misconfigured certificates to prevent downtime, reputational risks, and compliance issues.
With just a single domain name, Certificates Enterprise scans your entire digital infrastructure—covering network assets, cloud platforms (AWS, GCP, Azure), certificate authorities, DNS providers, and registrars. It continuously tracks certificate deployment and configuration, while also analyzing certificate transparency logs to detect any unauthorized or unexpected certificates.
A unified dashboard offers complete visibility over all active certificates, with customizable expiration alerts and daily assessments to keep you ahead of renewals, prevent PKI-related downtime, and strengthen network security.
Key Differences Between Lite and Enterprise
1. Management Console
Lite: Less interactive console.
Enterprise: Fully interactive console with advanced filtering and searching options, enabling users to quickly locate and manage certificates.
2. Discovery
Lite: Manual entry with automatic discovery via hostname, limited to 250 certificates.
Enterprise: Automated discovery across hosts, network ranges, domains, and IPs. Includes keyword discovery, DNS monitoring, and port scanning to identify certificates and endpoints comprehensively. Unlimited certificates and endpoints.
3. Monitoring and Assessment
Lite: Basic monitoring through Certificate Transparency (CT) logs.
Enterprise: Continuous CT log and network scan monitoring with daily assessments. Adds security checks for headers and additional hostname extraction to expand discovery.
4. Expiration Tracking and Alerting
Lite: Simple timeline for expiration tracking and one-time alert emails 7 days before expiration.
Enterprise: Configurable alerting with notifications to multiple email addresses, critical alerts, and overdue notifications. Includes options for real-time alerts upon the discovery of new certificates.
5. Advanced Features (Enterprise Only)
Issuance History: A detailed log of certificate issuances.
Integrations: Connect with AWS, GCP, Azure, and more to streamline certificate management across platforms.
Active Certificates: List and monitor all active certificates, with host information, technical analysis, and deployment details.
Expiring Endpoints: Classification of expiring endpoints for more targeted management.
Advanced Search and Filtering: Quickly locate certificates based on specific criteria, helping reduce time spent on certificate administration.
Summary of Differences Between Certificate Lite & Enterprise
| Feature | Certificate Lite | Enterprise |
|---|---|---|
| Certificate Ingestion | CT Logs only | CT Logs + Network Scanning + Cloud Integrations + API |
| Network Scanning | ❌ No | ✅ Yes |
| Cloud Integrations | ❌ No | ✅ Yes |
| API Access | ❌ No | ✅ Yes |
| Expiry Notifications | CT Log-based only | Endpoint verification before alerting |
| Certificate Deletion | Automatic cleanup of expired/superseded certs | 90-day archival process (effective Feb 28, 2025) |
| Management Console | Basic interface | Fully interactive console with advanced filtering & search |
| Certificate Discovery | Manual entry (limited to 250 certs) | Automated discovery across hosts, network ranges, domains & IPs |
| Monitoring & Assessment | CT log-based monitoring | Continuous CT log & network scan monitoring with daily security checks |
| Expiration Alerts | One-time email 7 days before expiration | Configurable notifications with critical & overdue alerts |
| Integrations & Security Insights | ❌ No | Connect with AWS, GCP, Azure for automated certificate management, Detailed issuance history and deployment tracking and Endpoint classification & security analysis |
| DNS monitoring & port scanning | ❌ No | DNS monitoring & port scanning for detecting unauthorized certificates |
Choosing the Right Tier
Red Sift Certificates Lite is the ideal solution for individuals, hobbyists or small businesses who need expiry monitoring for up to 250 certificates. Red Sift Certificates Enterprise is designed for businesses that need deeper insights, automation, and robust security management across a larger portfolio of certificates.
Read More
Red Sift Certificates FAQ