Free Uptime Monitoring With SSL Alerts: Which Tools Actually Include It
Not all free uptime monitoring tools include SSL certificate expiration alerts. This guide compares which free tools cover SSL monitoring, what alert thresholds they support, and what you lose at the free tier.
Free uptime monitoring tools vary widely in what they include at the free tier. Uptime checks are table stakes. SSL certificate expiration alerts are not - several popular free tools leave them out entirely or put them behind a paywall.
This matters because SSL expiry is one of the most preventable causes of downtime. If your monitoring tool does not alert you before a certificate expires, you either rely on auto-renewal working perfectly (it does not always) or you find out when browsers start showing security warnings to your users.
This guide covers which free monitoring tools include SSL expiration alerts, what thresholds they use, and what limitations to expect.
Quick Comparison: SSL Alerts on Free Tiers
| Tool | Free tier SSL monitoring | Alert thresholds | Free monitors | Check interval |
|---|---|---|---|---|
| Vantaj | Yes | 90/60/30/14/7/1 day | 20 | 5 min |
| UptimeRobot | Yes (basic) | 30 days only | 50 | 5 min |
| Better Stack | Yes | 14/7/1 day | 10 | 3 min |
| Freshping | No | Not available | 50 | 1 min |
| Uptime Kuma | No (plugin required) | Configurable | Unlimited | 20 sec |
| Pulsetic | No | Not available | 1 | 60 sec |
| StatusCake | Yes (limited) | 30 days | 10 | 5 min |
| HetrixTools | Yes | 30/14/7/3/1 day | 15 | 5 min |
Tools With Free SSL Expiration Alerts
Vantaj
Vantaj includes SSL certificate monitoring as a first-class feature on every plan, including free. When you add an HTTPS monitor, Vantaj automatically begins tracking the certificate's expiry date.
What you get free:
- SSL expiration alerts at 90, 60, 30, 14, 7, and 1 day before expiry
- Chain validation (checks that the full certificate chain is correctly configured, not just the expiry date)
- Hostname verification (confirms the certificate matches the domain being served)
- Email alerts on the free tier; Slack, Discord, and webhook alerts on paid plans
- 20 HTTPS monitors with SSL tracking included
The 90-day early alert is the differentiator. Most tools alert at 30 days. A 90-day warning gives you enough time to investigate a broken renewal process without any urgency. By the time you reach 30 days, you have already verified the renewal will succeed or scheduled a manual renewal.
Free tier limits: Email-only alert delivery. 5-minute check intervals. 2 probe regions.
UptimeRobot
UptimeRobot includes basic SSL monitoring on its free tier but with a single threshold.
What you get free:
- SSL expiration alert at 30 days before expiry
- No chain validation or hostname verification
- 50 HTTPS monitors
- Email alerts
The 30-day threshold is functional but tight if auto-renewal is broken and you need to debug the cause. UptimeRobot sends one alert at 30 days and does not escalate with additional alerts as the date approaches.
Free tier limits: Single alert threshold. Single probe region. No chain validation.
Better Stack
Better Stack includes SSL monitoring on its free tier with a tighter alert window.
What you get free:
- SSL expiration alerts at 14, 7, and 1 day before expiry
- Email alerts (plus Slack on free tier)
- 10 monitors
- 3-minute check intervals
The lack of a 30-day alert is a gap. The first alert fires at 14 days, which leaves less time to debug a broken renewal process before the situation becomes urgent. Teams with reliable auto-renewal setups will be fine. Teams with any renewal complexity benefit from earlier warning.
Free tier limits: No 30-day alert. Only 10 monitors on the free tier.
StatusCake
StatusCake includes SSL monitoring on its free tier.
What you get free:
- SSL expiration alert at 30 days
- 10 monitors
- 5-minute check intervals
- Email alerts
Free tier limits: Single alert threshold. 10 monitors total. Limited alert channels.
HetrixTools
HetrixTools includes SSL monitoring with multiple thresholds on its free tier.
What you get free:
- SSL expiration alerts at 30, 14, 7, 3, and 1 day before expiry
- 15 monitors
- 5-minute check intervals
- Email and Slack alerts
HetrixTools' tiered alert thresholds on the free tier compare well to paid plans from other tools. The 15-monitor limit and 5-minute interval are the main constraints.
Free tier limits: 15 monitors. 5-minute intervals. Limited check regions.
Tools Without Free SSL Alerts
Freshping
Freshping offers 50 free monitors with 1-minute check intervals and 10 probe locations - one of the strongest free uptime check setups available. SSL certificate monitoring is not included on the free tier.
If you use Freshping for uptime checks and want SSL alerts, you need a separate tool or a paid Freshping plan. Vantaj's free tier covers SSL monitoring for 20 domains and can run alongside Freshping.
Uptime Kuma
Uptime Kuma is self-hosted and free with no plan restrictions. SSL certificate monitoring is not enabled by default - it requires the SSL Certificate monitor type to be added separately for each domain you want to track.
To set up SSL monitoring in Uptime Kuma:
- Add a new monitor
- Select SSL Certificate as the monitor type
- Enter your domain
- Configure alert thresholds
Uptime Kuma supports configurable alert thresholds but lacks chain validation. It also inherits the fundamental limitation of all self-hosted monitoring: if your server goes down, the SSL alerts go with it.
Pulsetic
Pulsetic's free tier covers one monitor and does not include SSL certificate monitoring. Not suitable for teams that need SSL alerts on multiple domains.
What to Check Beyond the Expiry Date
SSL monitoring varies significantly in what it actually inspects. Expiry date is the minimum. Well-configured SSL monitoring also checks:
Certificate chain validity. The certificate your server sends includes a chain of trust from your certificate to the issuing CA to a root CA. If any intermediate certificate is missing or misconfigured, browsers reject the connection even if your certificate itself is valid and current. Chain errors appear after renewals more often than you would expect.
Hostname verification. The certificate must match the domain it is served on. Wildcard certificates, SAN certificates, and domain migrations can create hostname mismatches that break HTTPS silently.
Protocol version. Servers that support only TLS 1.0 or 1.1 are increasingly rejected by modern clients. Monitoring should flag outdated protocol support.
Of the free tools above, Vantaj is the only one that covers chain validation and hostname verification on the free tier.
How to Choose
You have 20 or fewer domains and want the most complete free SSL monitoring: Use Vantaj. The tiered alerts starting at 90 days, chain validation, and hostname verification cover more than any other free tier.
You have more than 20 domains and can tolerate a single 30-day alert: Use UptimeRobot for uptime checks (50 free monitors) and add HetrixTools for more detailed SSL alert coverage across your remaining domains.
You already run Uptime Kuma: Add SSL Certificate monitor types for each domain. You get configurable thresholds but no chain validation.
You use Freshping for uptime checks: Add a separate free Vantaj account for SSL and domain expiry monitoring. Freshping handles uptime; Vantaj handles certificate expiry.
Related Guides
Ready to try Vantaj?
Start monitoring in under 60 seconds. No credit card required.