Plans, pricing and limits¶

CertIntel has four plans: Free, Starter, Business and Enterprise. Every plan includes the full certificate inventory, public endpoint monitoring, the Windows and Linux Agent, dashboard-assigned workflows and Delegated DNS-01. The plans differ in how much you can register, which features are turned on and the support you get.

The plans¶

Prices are in US dollars. The yearly price is ten months for twelve.

What each row means:

• Public endpoints are the monitored targets (host and port) the platform probes from the outside; see Certificates.
• Internal certificate identities are the distinct certificates reported by agents, scripts and internal checks; see internal certificate reporting.
• Delegated DNS-01 records are the _acme-challenge names you delegate to CertIntel; see Delegated DNS-01.
• Agents are approved Agent credentials; see How agents are counted below.
• Users are dashboard accounts in the workspace, across all organizations.
• Organizations are the child organizations inside the workspace; see Organizations, users & roles.
• Activity history is how far back the activity log goes. Certificate history is how long each certificate's History tab, and the superseded certificates it lists, are kept; see Certificates.
• Alert destinations are the webhook, Slack, Discord, Teams, email, Pushover and ntfy destinations in Alerts & notifications; scheduled reports share the same entitlement.
• Workspace address is your own https://<slug>.app.certin.tel sign-in address, with the option of a vanity domain on top of it; see Branding & themes.
• Workspace security is the set of workspace-wide restrictions on the Security page, such as IP allowlists.
• CT Log Watch, single sign-on, Private CA, Appearance and MSP mode are described on their own pages: CT Log Watch, SSO, Private CA, Branding & themes and MSP mode.

Going over a limit¶

Starter and Business allow more than the plan's allowance:

• $1 per month for every 10 public endpoints or internal certificate identities above the plan.
• $1 per month for every agent above the plan.

Overage is applied on request: tell the CertIntel team how much more you need and your workspace allowance is raised; the price is added to your invoice. It is not applied automatically, and the platform does not let you pass a limit on its own; see How limits are enforced.

Enterprise pay-as-you-go has no allowance and no minimum. You are invoiced monthly in arrears for what the workspace used:

• $0.08 per month per public endpoint or internal certificate identity
• $0.50 per month per agent
• $3 per month per user

Enterprise is also available as a custom quote with fixed numbers.

How limits are enforced¶

Limits are hard caps, applied when you create or approve something, not afterwards:

• Creating a target, reporting a new internal certificate identity, adding a delegation, inviting a user or creating an organization fails at the limit. The error names the limit, for example Tenant subscription limit reached for agents (25). Existing resources are preserved; remove a resource or upgrade the plan.
• Nothing is deleted when you are over a limit, for example after moving to a smaller plan: everything you already have keeps working, and you cannot add more until you are under the limit again.
• The dashboard Overview shows a Plan usage & limits table with the number allowed and used for each limit, including agents, and an At limit marker.
• Features that are not in your plan (alert destinations, CT Log Watch, SSO, Private CA, workspace security, Appearance, MSP) show a notice on their page instead of the feature.
• The CertIntel team can raise or lower any limit or feature for one workspace (that is how overage is applied), and an organization inside the workspace can be given a lower limit than the workspace; see Plans and limits.

How agents are counted¶

An agent counts against the Agents limit from the moment its credential is approved on the Agents page, until it is revoked, deleted or unregistered:

• A freshly enrolled agent that is still pending approval does not count. Installing the Agent and exchanging an install token always succeeds; the limit is checked when you click Approve (or call the approval API).
• If approving would go over the limit, the approval is refused with the limit error above and the agent stays pending.
• The Agents page shows a warning when approving every pending agent would exceed the plan, with the approved, allowed and pending counts.
• Revoke, Delete and Unregister free the slot. Re-enabling a revoked key, re-registering an unregistered device or rotating its key to reconnect it makes the agent count again, so those actions are checked against the limit too.
• Heartbeat and polling intervals are the same on every plan.

See Install tokens & enrollment for approval, unregistering and the Agents page.

Changing your plan¶

• Free is self-service: sign up and start.
• Starter, Business and Enterprise are set up with the CertIntel team: contact us from the website and we switch the workspace to the plan, monthly or yearly, and invoice you (card on request). There is no self-serve billing page in the dashboard yet.
• Moving up takes effect as soon as the plan is changed. Moving down keeps everything you have; you cannot add resources above the new limits until you are under them.
• The former Professional plan is no longer offered. Workspaces that had it are now Starter, which has the limits Professional had, and earlier Starter workspaces were raised to the same limits; nobody lost capacity.

Related pages¶

• Organizations, users & roles
• Install tokens & enrollment
• Getting started