No DNS keys required
Add one CNAME when you add a domain, and renewals never touch your DNS again. Or connect your DNS provider for fully automatic validation.
100-day certificates arrive in 2027
SSL certificates that renew and deploy themselves
Certificate lifetimes keep shrinking. LapseZero issues and renews your certificates, then installs them on your servers, CDNs, and load balancers. Set it up once and stop thinking about it.
Unified Workflow
One workflow from validation to renewal
Workflow Active
Expiring soon
Auto-renewal
Renewed
AWS CloudFront
AWS ALB
SSH Server
8+
DNS & cloud providers
17+
Deployment target types
24/7
Automated monitoring & renewal
Why Teams Switch
Swapping certificates every few months? Let LapseZero do it
Issuing, validating, uploading to every CDN and load balancer: the chores you repeat with every new certificate now run on their own.
New certificates go live automatically
Servers, BT Panel, 1Panel, CDNs, and load balancers all get new certificates automatically, no scripts needed. If a server deploy fails, the original certificate is restored.
Keys stay encrypted
Sensitive credentials and certificate private keys are encrypted and used only for issuance, deployment, and renewal.
Alerts before anything expires
See at a glance which certificates are close to expiry. Renewal and deployment happen automatically, and you hear about problems right away.
Coverage across major DNS, cloud platforms, and deployment targets
LapseZero supports common DNS providers, cloud platforms, and deployment targets. Certificate monitoring can also be used on its own, without DNS, SSH, or cloud credentials.
Alibaba Cloud
DNS Providers · Cloud Platforms
Tencent Cloud
DNS Providers · Cloud Platforms
Cloudflare
DNS Providers
AWS
DNS Providers · Cloud Platforms
Google Cloud DNS
DNS Providers
Huawei Cloud DNS
DNS Providers
Volcengine TrafficRoute
DNS Providers
GoDaddy
DNS Providers
Deployment Targets
Certificate Monitoring
Keep an eye on your existing sites' certificates, free
Add any public HTTPS site without setting up DNS, SSH, or cloud credentials. LapseZero checks certificate validity continuously and alerts you before expiry.
Monitor any HTTPS site
Monitoring is not limited to certificates managed by LapseZero. Any public HTTPS site your team relies on can be added.
Multi-threshold alerting
Configure alerts at 60, 30, 15, 7, 3, and 1 day before expiry. Each threshold fires independently — you choose how early to know.
Catches sites that won't connect
Beyond expiry dates, it also checks for DNS failures, connection timeouts, and TLS handshake errors.
Live Monitoring
cdn.partner.ioExpired0d
shop.example.cnExpiring14d
mail.internal.coHealthy120d
api.example.comHealthy245d
FAQ
SSL certificate automation FAQ
These are the questions teams usually ask before trusting LapseZero with certificate workflows.
How is LapseZero different from certbot?
Once you have several servers, CDNs, and load balancers, certbot needs extra scripts and cron jobs to keep everything in sync. LapseZero puts DNS validation, issuance, deployment, renewal, monitoring, and alerts in one console: set it up once and it runs on its own. If you run a single site on a single server, certbot may be all you need.
Do I need to provide DNS provider AccessKeys?
No. With delegated DNS validation, you add a CNAME once in your own DNS and LapseZero handles validation from then on. You can also connect your DNS provider so LapseZero writes validation records automatically; if you do, use a dedicated sub-account with only the DNS permissions it needs.
How we protect your credentialsHow are credentials and certificate private keys stored?
DNS, cloud, and SSH credentials, plus certificate private keys, are encrypted with AES-256-GCM. Once a credential is saved, neither the console nor the API shows it in plain text again, not even to you. Credentials are used only for the issuance, deployment, renewal, and notifications you configure.
How we protect your credentialsCan I connect the DNS or cloud services I already use?
Current coverage includes Alibaba Cloud DNS, Tencent Cloud DNSPod, Cloudflare, AWS Route 53, Google Cloud DNS, Huawei Cloud DNS, Volcengine TrafficRoute, GoDaddy, and certificates deploy automatically to 17 targets: SSH servers, BT Panel and 1Panel sites, plus Alibaba Cloud, Tencent Cloud and AWS products such as CDN, load balancers, WAF, OSS, EdgeOne, CloudFront and API Gateway.
See all integrationsWhat can I do on the free plan?
The free plan includes 3 domains, 5 deployment targets, and 5 certificate monitors. You can start with certificate monitoring or configure the full automation workflow right away.
Pricing and limitsGet Started
Set it. Forget it. LapseZero handles your certs.
The free plan includes 3 domains, 5 deployment targets, and 5 monitors. Sign up and start configuring without paying first.