# crt.guru

crt.guru is an External Attack Surface Management product by Crt.guru. It runs in the cloud. Pricing is commercial (contact sales).

External TLS cert monitoring with expiry alerts, vuln scanning & compliance reports.

Listed March 2026.

## What is crt.guru?

crt.guru is an external TLS certificate monitoring service that scans domains and hostnames from multiple geographic regions without requiring agents, server access, or code changes.

The service supports monitoring across multiple protocols beyond standard HTTPS, including LDAPS, SMTP STARTTLS, and IMAPS on any port. Scans are performed from locations including Frankfurt, New York, and Amsterdam, enabling detection of issues that local or single-region checks may miss, such as CDN edge nodes serving stale certificates.

Core monitoring capabilities include:
- Expiry alerts sent at 30, 14, 7, and 1 day before certificate expiration
- Vulnerability scanning for known TLS weaknesses including Heartbleed, ROBOT, and CCS Injection
- Weak cipher detection
- Certificate revocation detection
- Certificate Transparency (CT) log monitoring to detect unauthorized certificate issuance for monitored domains
- Compliance checks against Mozilla, PCI DSS 4.0, and NIST standards
- One-click PDF compliance report generation in formats suited for CISOs, DevOps, and developers
- Portfolio-level risk scoring, compliance matrix, expiry calendar, and trend tracking

Notifications are delivered via email, Telegram, Discord, and Slack.

Plans range from a free tier (3 assets, daily scans, single region, 7-day history) to Enterprise (200 assets, 30-minute scan intervals, unlimited regions and history, 50 team members). Paid plans include on-demand manual scans, scan comparison and diff, and extended history retention. A REST API is also available.

Tags: TLS, SSL, PCI DSS, NIST, Security Scanning, Alerting, Security Compliance Training, Security Reporting, Vulnerability, REST API

## Where it fits in your security program (NIST CSF 2.0)

- [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe.
- [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [External Attack Surface Management](https://cybersectools.com/categories/external-asm)
- Vendor: [Crt.guru](https://cybersectools.com/companies/crtguru) (Claimed listing)
- Deployment: Cloud
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Commercial (contact sales)
- Features: 10 listed
- Integrations: 4 listed
- Website: crt.guru

The full feature and integration lists are on the page for signed-in visitors.

## Where it ranks

crt.guru is not a pick on the current [Best Attack Surface Management Solutions for Business](https://cybersectools.com/shortlists/best-attack-surface-solutions).

## crt.guru FAQ

### What is crt.guru?

crt.guru is a product by Crt.guru in the External Attack Surface Management category. It covers TLS, SSL and PCI DSS.

### What is the pricing for crt.guru?

crt.guru is a commercial product. For pricing, visit https://crt.guru/ or contact Crt.guru.

### What are alternatives to crt.guru?

Alternatives to crt.guru listed on CybersecTools:

1. [ctlogs.dev](https://cybersectools.com/tools/ctlogsdev) - Fast Certificate Transparency search and JSON API for subdomain reconnaissance. (Commercial)
2. [Attack Surface Scan](https://cybersectools.com/tools/attack-surface-scan) - Agentless external attack surface monitoring with continuous change detection. (Commercial)
3. [Assetnote Exposure Engine](https://cybersectools.com/tools/assetnote-exposure-engine) - Continuous exposure detection & verification engine for attack surface mgmt. (Commercial)
4. [SurfaceDiff](https://cybersectools.com/tools/surfacediff) - Continuous external attack surface monitoring that shows what changed between scans. (Commercial)
5. [v6Protect Trusted Third Party Security Service](https://cybersectools.com/tools/v6protect-trusted-third-party-security-service) - Independent security scoring and attestation for third-party managed web apps (Commercial)

Compare all crt.guru alternatives at [https://cybersectools.com/alternatives/crtguru](https://cybersectools.com/alternatives/crtguru)

### What deployment and organization size does crt.guru fit?

crt.guru is available as a cloud service. It is listed for startups, small businesses, mid-market companies and enterprises. Pricing is commercial. Ask Crt.guru for pricing and support terms.

## Compare crt.guru with similar solutions

- [crt.guru vs ctlogs.dev](https://cybersectools.com/compare/crtguru-vs-ctlogsdev)
- [crt.guru vs Attack Surface Scan](https://cybersectools.com/compare/attack-surface-scan-vs-crtguru)
- [crt.guru vs Assetnote Exposure Engine](https://cybersectools.com/compare/assetnote-exposure-engine-vs-crtguru)

All alternatives to crt.guru: [/alternatives/crtguru](https://cybersectools.com/alternatives/crtguru)

---

Source: https://cybersectools.com/tools/crtguru

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on crt.guru and Crt.guru: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md