KeyChest starts from the position that you do not know what certificates you have. It finds them, tracks them from issuance to expiry without you entering anything by hand, and then tries to help you renew and deploy them. It is closer to a certificate management system than a monitor — which is either exactly what you need or considerably more than you wanted.
From $5 a month · No check quotas · Set up in under a minute
Is KeyChest worth it?
For an organisation that has genuinely lost track of its certificates, the discovery and lifecycle work is worth having, and the free personal tier is a reasonable way to find out. Two things hold it back for everyone else: enterprise pricing is quote-only, so you cannot evaluate cost without a sales conversation, and the product carries more management machinery than a team that simply wants to be warned before a certificate expires will ever use.
KeyChest discovers certificates rather than waiting for you to list them. It searches for certificates associated with your domains and tracks each one from configuration through to expiry automatically.
Around that it adds lifecycle features: on-demand renewals, deployment automation, failure detection and weekly reports summarising the state of your certificates and any errors found. It also ships a lightweight proxy so certificates on internal networks can be tracked, which most external scanners cannot reach.
The free Personal plan covers HTTPS and TLS monitoring, certificate and endpoint discovery and expiration reports. Business use is an annual fixed-price licence, quoted on request.
Finding certificates you did not know about, then managing them.
Finds certificates and endpoints associated with your domains, so the inventory is built rather than typed. New certificates are picked up as they are created.
On-demand renewals, deployment automation and failure detection, with integrations to several certificate providers on the enterprise licence.
A lightweight proxy lets it track certificates inside a network that an outside scanner cannot see.
A regular summary of certificate state and errors, which suits people who want a scheduled review rather than only event-driven alerts.
Monitoring, discovery and expiration reports at no cost for personal use, with no trial clock.
Priced as a licence rather than per certificate, which is predictable once you know the number.
Free for personal use; everything else is a conversation.
| Plan | Price | Scope | Notes |
|---|---|---|---|
| Personal | $0 | Personal use | HTTPS and TLS monitoring, discovery, expiration reports |
| Enterprise | Quote | Multiple users | Full reporting, internal certificate management, CA integrations, annual fixed-price licence |
Monitoring vendors change plan limits and prices frequently and without announcement. Every figure here carries a "verify on their site" caveat and you should take it seriously before making a decision on cost.
KeyChest does discovery and lifecycle management; we do neither. We will not find a certificate you forgot about, and we will not renew or deploy one for you — you add the endpoint and we watch it. If the problem is that nobody knows what the estate contains, that is a real gap on our side and KeyChest addresses it directly.
What we offer is a published price and a wider brief. $5 a month for 25 monitors, $19 for 50, $34 for 100, with certificates, uptime, domain expiry, page content changes, cron heartbeats and status pages all drawing from the same allowance. Our expiry window runs from 1 to 60 days and we alert when a certificate has already expired and when the certificate check itself fails.
The honest split: certificate discovery and lifecycle management across an estate nobody has fully mapped — theirs. A known set of endpoints you want watched for expiry alongside everything else that can take a site offline, at a price on a page — ours.
Every recorded change is compared word by word and kept with a before-and-after image. This is the real output, shown with worked example data.
Price fell from $49 to $39, and an annual discount was added.
The item is available again and the basket button returned.
A new subprocessor was added in another jurisdiction.
The free plan sends to one email address. Every paid plan adds the chat and webhook channels below, with 2 to 10 destinations depending on the plan. However many alerts you receive, the price does not change — nothing here is metered or charged per alert.
There are no voice calls and no SMS. If a phone call at 3am is a hard requirement, say so before you subscribe — we would rather tell you now than refund you later.
There is a free Personal plan covering HTTPS and TLS monitoring, certificate and endpoint discovery and expiration reports. Business use is an annual fixed-price licence quoted on request.
Not published. Pricing is quoted per organisation, so you will need to contact them. That is worth knowing before you start an evaluation.
It searches for certificates associated with your domains and tracks them automatically, picking up new ones as they are created. You do not maintain the list by hand, which matters because forgotten certificates cause most expiry outages.
Yes, through a lightweight proxy deployed inside the network. That is more setup than an external scanner but it reaches hosts an external scanner cannot.
It offers on-demand renewals and deployment automation, with integrations to several certificate providers on the enterprise licence. That places it closer to a management system than a monitor.
No. It is a certificate product. Whether the site is responding is a separate question.
It is positioned for personal use. For business monitoring the enterprise licence is the intended route, which means a pricing conversation first.
KeyChest discovers and manages certificates, which we do not do. We monitor a set of endpoints you define, for expiry, expired certificates and failed checks, alongside uptime, domains and page changes from $5 a month with the price published.
Last updated August 2026 · Written by Amit Gupta, founder of MonitoringDaddy
KeyChest finds certificates you forgot; we watch the ones you know about, alongside uptime and domains, from $5 a month.