Never let a client’s padlock break on your watch.
LockSteward watches every client’s SSL certificates and domain renewals in one place. Your clients are kept in their own folders, alerts arrive before anything expires, and a branded health report goes out each month so clients can see the work you’re doing.
Nothing to install on client servers · We never ask for private keys · Priced in pounds
Certificates are about to expire a lot more often
The CA/Browser Forum has voted to cut the maximum life of public TLS certificates in stages. Every client site you look after will need renewing more often, and each renewal is another chance for something to go wrong without anyone noticing.
One calm dashboard for every client’s certificates and domains
Designed for the people who look after other people’s websites, not for in-house DevOps teams.
Client folders
Group hostnames by client, so you can see straight away which clients are healthy and which need a look.
Expiry & failed-renewal alerts
Warnings at 30, 14, 7 and 3 days. If a certificate that should have auto-renewed hasn’t, you’ll be told.
Chain & config health
Catch missing intermediates, hostname mismatches and outdated protocols that break some browsers and devices.
Certificate Transparency watch
See when a new certificate is issued for a client’s domain, so you can spot one you didn’t expect.
Domain expiry
Track registration renewals as well, because a lapsed domain takes the whole site and the email down with it.
Branded client reports
A monthly health report carrying your logo, ready to send to each client. It makes your retainer work visible.
Simple pricing in pounds
Launch pricing. Pay per monitored hostname, with no per-seat charges and no surprises.
- 3 hostnames
- Expiry & chain checks
- Email alerts
- 25 hostnames
- Client folders
- CT watch & domain expiry
- 150 hostnames
- Branded monthly client reports
- Everything in Starter
- 500 hostnames
- White-label reports
- Everything in Agency
Draft launch pricing, shown for guidance and subject to change before launch. Nobody is charged for joining the waitlist.
Free check: one domain, right now
Enter a domain to see its newest certificate in the public Certificate Transparency logs and its registration expiry date. This uses public records only and doesn’t connect to the server. LockSteward itself will also run live checks.
Join the early-access waitlist
We’re opening LockSteward to a small group of UK agencies and IT providers first. Tell us a little about your setup and we’ll be in touch when your place is ready.
Questions
Do I need to install anything on client servers?
No. LockSteward checks from the outside, the same way a visitor’s browser does, and reads public records such as Certificate Transparency logs and RDAP domain data.
Will you ever need our private keys or server logins?
Never. We only look at the public certificate a server presents and at public registry data.
How is this different from tools for DevOps teams?
Those tools are built around cloud accounts and engineering teams. LockSteward is built around clients: client folders, reports carrying your branding, and simple pricing per hostname in pounds.
When does it launch?
We’re building it now. Waitlist members get access first.