Pick the plan that fits your domains

Certificates renew themselves — our agent runs ACME on your Linux servers and private keys never leave them. Renews from a public CA such as Let's Encrypt or from your own internal ACME CA. We also inventory certificates issued by Microsoft AD CS, so you can see which ones Auto-Renew does not cover yet.

Signed NIS2 evidence reports your auditor can verify independently, with report history and an executive summary of remediation status. The pack also includes the signed evidence export bundle, eIDAS qualified-certificate verification, OV/EV registry cross-checks, C2PA content-provenance monitoring, the Incident Reporting add-on and custom data retention.

Independent, recorded evidence that your certificates are really in the public CT logs — and a published view of every log we watch and how fresh each one is. Adds full issuance history including expired certificates, 3-year CT retention, issuance-velocity alerts and a signed issued-vs-deployed reconciliation report. Pairs with Pro or above.

The clock-and-record half of the CRA 24-Hour Reporting Kit, inside the dashboard: register the products you place on the EU market, record the moment of awareness, and get the 24-hour, 72-hour and final-report deadlines under CRA Article 14, NIS2 Article 23 or DORA Article 19 with alerts before they pass. The ENISA platform fields are pre-filled from your register; what you filed and when, your tabletop drills and a daily security.txt check are sealed into your signed evidence chain. SkyQon never submits a report for you.

Every endpoint gets a readiness score and a risk band, and we flag the ones whose traffic could be recorded today and decrypted later. For each server the Assistant lists the exact steps, with a one-click replacement for a weak certificate that Auto-Renew already manages. You can assign a step to a colleague; it counts as done when a later scan sees the change. The add-on also includes the phased roadmap, supplier questionnaires, a CBOM export and the signed post-quantum posture report. Public certificate authorities do not issue post-quantum certificates yet, so for a public site the Assistant gives you the configuration lines for hybrid key exchange and tracks your readiness until they do.