Both are hosted services that check SSL/TLS certificates from the outside and alert before they expire, including chain and revocation problems. Neither is an uptime monitor.
| CertAvert | CertHalo | |
|---|---|---|
| Main product | Certificate and domain monitor | Certificate monitor |
| How it runs | Hosted, nothing to install | Hosted; agents you run for internal certificates (Business) |
| Free | 15 domains | 3 certificates |
| Paid plans | Starter 25, $50 a year; Plus 50, $100 a year; Pro 100, $150 a year (domains) | Starter 25, $30 a year; Pro 100, $90; Business 300, $290 (or $3, $9 and $29 a month) |
| Billing | Yearly | Monthly or yearly |
| Users per account | 1 | Pro up to 5, Business up to 20 |
| How often it checks | Twice a day | Daily (Free), every 6 hours (paid) |
| Expiry alert days | 30 and on expiry (Free); 30, 14, 7 and on expiry (Starter); your own days (Plus, Pro) | 60, 30, 14, 7, 3 and 1 (Free); your own days (paid) |
| Short-lived certificates | Alerts at a quarter of the lifetime (under 80 days) | Not found |
| Ports other than 443 | Any port | Any port |
| Untrusted certificate or wrong name | Shown with the reason; emailed on paid plans | Yes alerts |
| Chain check (missing intermediates) | Yes | Yes |
| Revocation check | Yes OCSP or CRL | Yes OCSP and CRL |
| Renewal window (ARI) | Yes | Not found |
| Post-quantum key exchange | Yes | Not found |
| Certificate change alerts | Shown on every plan; emailed on paid plans | Yes renewal, new issuer |
| Certificate Transparency logs | Lists other names under your domains; no alert for new ones | Not found |
| Domain name expiry | Registration dates on every plan; reminder emails on paid plans | Not found |
| Alert channels | Email, Slack, Discord, Teams | Email; Slack and Teams on paid plans; webhooks on Pro and Business |
| API | No | Pro and Business |
| Status pages | No | Not found |
| Internal certificates | No the free certavert-scan runs on your own network | Business, with agents on your network |
| Audit report | Pro (PDF and CSV, checked at /verify) | Business: a CSV of team activity, not of certificates |
"Not found": we couldn't find it on CertHalo's pages, which doesn't mean it isn't there. CertHalo is a trademark of its owner; CertAvert isn't affiliated with it.
CertHalo fits better if you want a lower price per certificate, checks every 6 hours, an API, several users or internal certificates. CertAvert fits better for more domains free, domain name expiry, the renewal window and post-quantum checks, and a certificate report for auditors on Pro.
Sources: certhalo.com, certhalo.com/changelog, certhalo.com/docs/api
We check each product's own pages and do our best to keep this right, but mistakes are possible and products change. Something wrong or out of date? Write to support@certavert.com.