Usage-based pricing with no monthly fees: £0.001 per 1,000 API requests and £1.50 per GB of storage per month, plus a 30-day free trial.
Starting price
Free (Community plan); paid plans start at $99/month (Professional)
Not documented
Free plan
Not documented
Not documented
Free trial
Not documented
Yes
Platforms
Not documented
Not documented
Team collaboration
Not documented
Not documented
AI features
Not documented
Not documented
Public API
Not documented
Yes
Pricing Compared
Starting price reflects the lowest paid tier, not the full cost for every team size or usage level.
CertKit
Community — Free n/a
Professional — $99/month monthly
Business — $399/month monthly
Enterprise — Custom quote annual or custom
vessot
No individual plan breakdown documented yet.
Pros & Cons
CertKit
Pros
Free Community tier makes it easy to evaluate the platform's core discovery and monitoring capabilities without cost.
Deployment via a single agent to a wide range of servers and network appliances, without needing ACME configured everywhere, simplifies rollout across heterogeneous infrastructure.
Certificate Transparency-based discovery surfaces forgotten or unauthorized certificates that manual tracking would likely miss.
Generous 90-day free trial on paid tiers with no credit card required lowers the barrier to a full evaluation.
Purpose-built and narrowly focused on certificate lifecycle management rather than being a small feature bolted onto a broader security suite.
Cons
A relatively new product, launched in 2024, with less of a long-term track record than established certificate lifecycle management vendors.
Small company (TrackJS LLC) behind the product means less scale of support and resources compared to larger enterprise security vendors.
Free and entry-level paid tiers cap certificate and agent counts fairly low (2 and 10 respectively), meaning larger organizations will need Business or Enterprise pricing quickly.
Enterprise pricing is custom and not published, requiring a sales conversation for large-scale or multi-tenant deployments.
As with any tool crawling Certificate Transparency logs, discovery is limited to publicly logged certificates and won't surface internal-only or private CA-issued certificates not logged publicly.
vessot
Pros
Zero-knowledge, AES-256-GCM encryption means VESSOT itself cannot access stored data
Usage-based pricing with no monthly minimums or setup fees, so costs scale with actual use
Simple, well-documented CRUD-style API and PHP Composer library make integration straightforward
Ready-made WordPress and Magento 2 integrations reduce setup work for common platforms
30-day free trial lets teams evaluate the platform before paying
Cons
No published tiered/enterprise plans -- pricing is pay-per-use only, which may be harder to budget for at scale
Integration currently centers on a PHP library plus WordPress/Magento plugins, which may limit fit for teams outside the PHP ecosystem
Public evidence of company background (founding date, team size, headquarters) is limited
Support appears limited to email, with no published live chat or phone option
Use Cases
CertKit
Preventing certificate-expiration outages — IT teams use CertKit's monitoring and automated renewal to eliminate the risk of a forgotten certificate expiring and taking down a production service unexpectedly.
Auditing an organization's full certificate footprint — Security teams use CertKit's Certificate Transparency-based discovery to build a complete inventory of every certificate issued for their domains, including ones issued outside official processes.
Managing certificates across multiple client environments — Managed service providers use CertKit's multi-tenant Enterprise tier to centrally track and automate certificate lifecycle management across many separate client infrastructures.