oolak
Live demo Free 14-day trial →
oolak / Use cases / Certificates and domains
Certificates and domains

Our certificate expired and the website went down.

An expired certificate or domain can take a service offline in seconds. oolak keeps track of every certificate and domain it sees and warns the right team well in advance.

Start a free 14-day trial → See how it works
Everything visible from the internet, with its owner.
Today

What usually happens

  • Certificates are tracked in a spreadsheet that is always out of date.
  • Renewal reminders go to someone who left the company.
  • Customers notice the outage before the team does.
With oolak

What changes

  • No more outages caused by forgotten renewals.
  • Warnings reach the people who can act on them.
  • One list shows every certificate and when it ends.
With oolak

How it works, step by step

  1. Collect every certificate

    Certificates are gathered from scans, certificate logs and your public services.

  2. Link them to owners

    Each certificate and domain is linked to the asset and team behind it.

  3. Warn in time

    Owners are notified 30, 15 and 7 days before expiry.

  4. Recognise renewals

    When a renewed certificate appears, it replaces the old one automatically.

Features

The features behind it

Attack surface

See your organisation the way an attacker does.

oolak finds the domains, host names, IP addresses, certificates and services that anyone on the internet can reach.

Learn more Reporting and dashboards

Show progress with real numbers, not estimates.

Every scan cycle adds to a trend that management can trust.

Learn more Workflows

Let routine security work run itself.

Build workflows by filling in a form, without writing code.

Learn more

See oolak on your own data in 14 days.

We install oolak in your environment, connect your tools and show you your real risk picture. You keep everything it finds.

Start a free 14-day trial → Try the live demo
For engineers

Technical details

Who receives the warnings?
Alert rules decide the audience: the owning team, specific people or everyone with organisation-wide access. Warnings can be limited to internet-facing certificates only.
Where do domain expiry dates come from?
From RDAP lookups on your confirmed root domains, refreshed by the attack surface research connector.

More problems oolak solves

Urgent vulnerabilities

A critical vulnerability is in the news. Are we affected?

Find every affected system in minutes, scan just those systems and track the fix until it is confirmed.

See how it works Shadow IT

Which of our servers has everyone forgotten about?

Bring forgotten test servers, old subdomains and unmanaged hosts to light, and give each one an owner.

See how it works