auditing-tls-certificate-transparency-logs

What problem does it solve?

Certificate Transparency data often flies under the radar for security teams, leaving organizations exposed to unauthorized certificates and unseen subdomain surfaces. This skill provides automated CT log monitoring, CT-based subdomain discovery, and alerting workflows to detect misissuance, phishing infrastructure, and hidden attack surfaces.

Core Features & Use Cases

• Continuous CT log monitoring to identify new certificates for owned domains and alert on unauthorized issuers.
• Subdomain discovery via SAN/NAME fields in CT logs, including wildcard and historical subdomains for asset inventory and exposure assessment.
• Typosquat detection and surface mapping using CT-derived data to preempt phishing and brand abuse.
• CA issuance auditing and generated alerts for incident response and governance.

Quick Start

Run a CT monitoring cycle against the target domain to ingest new certificates and surface alerts.