CheckRed Certificate Posture Management (CPM) is a solution for continuously monitoring digital certificates across enterprise environments, including domains, subdomains, clouds, and certificate authorities (CAs). Key capabilities include: - Unified Certificate Inventory: Discovers and tracks all certificates — including sanctioned and unsanctioned issuances — across the entire external attack surface, eliminating fragmented or spreadsheet-based tracking. - Continuous Detection: Monitors for expiring, expired, rogue, or misconfigured certificates, as well as weak cryptographic keys and deprecated algorithms, on an ongoing basis. - Post-Quantum Cryptography (PQC) Monitoring: Identifies which certificates are quantum-safe and which are vulnerable, with agentless auto-discovery of algorithms, key sizes, and signature schemes, and continuous checks as PQC standards evolve. - Risk Alert Prioritization: Categorizes certificate alerts by severity so security teams can focus on the most critical issues first, reducing alert fatigue. - Guided Remediation Workflows: Supports isolating, revoking, and preventing risky certificates through automated workflows, governance policy enforcement, and one-click evidence generation for compliance reporting. - HTTP/TLS Posture Validation: Validates the HTTP and TLS configuration posture per asset across the external attack surface. CPM is differentiated from traditional Certificate Lifecycle Management (CLM) tools by extending beyond known certificates to discover unknown, rogue, or unsanctioned certificates and by providing crypto strength assessment and PQC readiness evaluation.