Services & access

Start with your certificates. Build from there.

Getting a certificate is the first step. Installing it, checking what production serves and knowing who had access are the awkward bits. CertLocker brings those jobs together.

Get started

No charge to get started. No credit card needed.

Choose the help your team needs.

Create your account and start with hosted SaaS. When you need help with inventory, automation or a wider rollout, we can work through it with your team.

Early access

Get your existing records into a working view.

  • Create your hosted account and start using CertLocker
  • Help mapping your certificate spreadsheet or inventory
  • Walk through ownership, expiry and endpoint checks
  • Direct feedback to the engineers building CertLocker
Get started

Infrastructure teams

Put renewal, delivery and access into daily operations.

  • Certificate issuance, delivery and verification workflows
  • Secrets, scoped tokens and operator or agent access
  • Team permissions, groups and audit history
  • Agree rollout help and ongoing support around your estate
Discuss your workflow

Enterprise

Plan across teams, environments and procurement requirements.

  • Map larger Windows, Linux, cloud and on-prem estates
  • Review access boundaries and deployment requirements
  • Agree capacity, support and service terms
  • Plan integration and rollout with your technical team
Arrange a walkthrough

There is no charge to get started with hosted CertLocker. We agree the scope, capacity, support and commercial terms with you before any paid service begins. See the services and access page for the available paths.

Want to see what to bring to the call? Read how onboarding works.

If your estate needs a private deployment, we can discuss that as part of the rollout.

Packaged services around the platform

Sean and Darren work directly with customers, alongside the wider CertLocker team. Start with a face-to-face meeting or video call to discuss your workflow and see hosted CertLocker. We agree the scope and commercial terms before paid work begins.

Fixed-price health check

Start with the certificates and endpoints your team is responsible for. We review ownership, expiry, renewal, delivery and what the live service is serving, then give you a prioritised set of findings and next steps.

We agree the systems to review, the deliverables and a fixed price before work begins.

Discuss a health check ↗

Implementation support

Work with the engineers who built CertLocker to map your inventory, configure access boundaries and put renewal, delivery and endpoint checks into use across your Windows, Linux, cloud and on-prem systems.

We agree the target systems, access requirements, rollout steps and handover with your team.

Plan implementation ↗

Training

Walk through the workflows your operators will use: certificate renewal, secret delivery, scoped access, endpoint checks and audit review. Sessions use the operational questions and deployment patterns your team needs to handle.

We agree the audience, workflows and session format before training begins.

Discuss training ↗

Managed certificate operations

Arrange ongoing help running certificate workflows around the platform, including renewal, delivery, endpoint verification and reviewing failures. Work directly with CertLocker on the certificates and services in the agreed scope.

We agree responsibilities, access, support hours and escalation arrangements before the service starts.

Discuss managed operations ↗

One workflow from inventory to production.

Certificates sit alongside the credentials, hosts and access needed to deliver them. You can start with the part causing your team the most work.

For SSH/SFTP deployment, CertLocker Automations runs the service steps your team controls without a CertLocker deployment agent on the target.

Certificate inventory

Bring certificates, owners, expiry dates and endpoints into one view so the next renewal starts with a clear record.

Renewal and delivery

Issue through ACME, deliver to HAProxy, Nginx or IIS, and run the activation steps your service needs over standard SSH.

Secrets and credentials

Keep operational secrets and certificate material with version history, scoped access and an audit trail.

Operator and agent access

Control SSH, bastion and MCP access with scoped tokens, groups and permissions.

Endpoint verification

Check what the live endpoint serves after deployment. A renewed file is only part of the job.

Audit review

Review certificate, secret and access events together when someone asks who changed what. Build evidence for your audit process.

Before you get started

How do we get started?

Create your hosted account and start using CertLocker. If you need help mapping your existing records or planning the next workflow, our engineers can walk through it with you. There is no charge to get started and no credit card is needed.

Do we need to choose a paid plan first?

No. There is no charge to get started with hosted CertLocker. We agree the scope, capacity, support and commercial terms with you before any paid service begins.

Can you help with our spreadsheet?

Yes. We can help map your certificate inventory into CertLocker and review the records with you. Bring a redacted sample to the walkthrough so we can agree a suitable import approach.

Does importing a public certificate enable renewal?

A public certificate gives an inventory record with expiry and certificate details. Renewal and deployment need an authorised issuance workflow, domain validation and access to the destination systems. We will help you plan that next step.

Can CertLocker provide compliance certification?

CertLocker records operational evidence for certificate, secret and access reviews. ISO 27001 certification and SOC 2 attestation require an independent assessment of your organisation and its controls.