Known Limitations

Current Limitations

Limitation	Details	Status
Internal certificates	Only publicly accessible endpoints are supported	Agent coming soon
mTLS endpoints	Client certificate authentication not supported	Contact us for enterprise
Connection timeout	10 second limit for certificate retrieval	Contact us if you need more
Port restrictions	Only ports 443, 8443, 8080, and 80 are supported	Security measure
API key access	API keys for external integrations not yet available	Coming soon
Discord notifications	Not yet available	Coming soon
Microsoft Teams	Microsoft has deprecated Teams webhooks	Use Slack or custom webhooks
CT log monitoring	Certificate Transparency monitoring not available	Coming in future release
IP whitelisting	We use dynamic IPs, no static list available	Contact us for firewall rules

These limits help ensure reliable service for all users.

Operation	Limit	Window
Manual certificate checks (“Check Now”)	10	per minute
Test notifications	5	per minute
API requests	100	per minute

If you hit a rate limit, wait a moment and try again. Rate limits reset every minute.

To protect the platform and our users, the following security restrictions are enforced:

Restriction	Details
Allowed ports	Certificate checks only work on ports 443, 8443, 8080, and 80
Private networks	Internal/private IP addresses cannot be monitored (127.x.x.x, 10.x.x.x, 192.168.x.x, etc.)
Cloud metadata	Cloud provider metadata endpoints are blocked
Webhook URLs	Must use HTTPS and cannot target private IP ranges

These restrictions prevent abuse and protect both our infrastructure and your networks.

Each plan has limits on certificates, team members, and features. See Pricing for full details.

We’re actively developing CertWatch. If you need a feature or have a limitation causing issues: