| What it does | Security engineer and penetration tester offering expert security consulting and code review
| Search billions of TLS certificates from all public Certificate Transparency logs by domain, wildcard, organization, serial number or SHA-256 fingerprint
|
|---|
| Stage | Established
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | PL
| FR
|
|---|
| Pricing model | Contact for pricing
| Not given
|
|---|
| Pricing | Invoicing in EUR or PLN; prepaid blocks upfront; project or retainer per statement of work
| Not given
|
|---|
| Key features | - Penetration testing for software including web, mobile, desktop, cloud and CI/CD systems
- Network and service infrastructure security review
- First-party source code review for vulnerabilities and risky patterns
- Third-party code and dependency review for supply chain risk assessment
- Security architecture for new and existing systems
- Security tooling design and engineering
- Incident response and crisis management support
- Workshops and talks for developers and security teams
| - Search by domain, wildcard, organization, serial number, SHA-256 fingerprint and public key (SPKI)
- Index of 28.5 billion certificates across 88 active and 111 archived CT logs
- 6.5 billion distinct hostnames with first-seen and last-seen dates, certificates back to 2013
- Fast API: domain lookup 25-30 ms, subdomains 45-50 ms
- Subdomain finder with certificate counts and first/last seen dates
- BIMI brand logos from verified mark certificate logs
- CAA record checker showing records as CAs see them and CAs that issued for a domain
- Free JSON API with cursor pagination and anonymous use
- Machine-readable documentation at llms.txt for AI agents
- Continuous ingestion of all public CT logs with live coverage metrics
|
|---|
| What makes it different | - 12+ years of security experience with previous role at Opera Software managing security and bug bounty programs
- Calls out insecure designs plainly with evidence and specific solutions rather than security theatre
- Focus on durable, material improvements to security with lasting impact
- Holistic approach including user experience and product perspective beyond just security
- Extreme ownership, customer obsession, and focus on making real impact
| - Searches all public Certificate Transparency logs continuously ingested into a single index
- Reveals subdomains hidden from DNS enumeration and web crawls through certificate search
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 55 ● no change since last check | 38 ● no change since last check |
|---|
| Trust Flow (Majestic) | 17 | 18 |
|---|
| Citation Flow (Majestic) | 39 | 29 |
|---|
| Referring domains (Majestic) | 493 | 76 |
|---|
Joshua Rogers
ctlogs.dev