SSLMate — Cert Spotter API API Integrations

Build and run workflows using the SSLMate — Cert Spotter API API. Use 1000s of source-available triggers and actions across 2,000+ apps. Or write custom code to integrate any app or API in seconds.

Overview#

The SSLMate — Cert Spotter API allows you to monitor SSL/TLS certificates across the web, catching potentially misissued certs and identifying certificates that could affect your domain security. By tapping into the API with Pipedream, you can automate alerts, integrate certificate data into security analyses, and streamline compliance checks by reacting to newly issued certificates in real-time.

import { axios } from "@pipedream/platform"
export default defineComponent({
  props: {
    sslmate_cert_spotter_api: {
      type: "app",
      app: "sslmate_cert_spotter_api",
    }
  },
  async run({steps, $}) {
    return await axios($, {
      url: `https://api.certspotter.com/v1/issuances`,
      headers: {
        Authorization: `Bearer ${this.sslmate_cert_spotter_api.$auth.api_key}`,
      },
      params: {
        domain: `example.com`,
      },
    })
  },
})

Example Use Cases#

Domain Security Monitoring: Automate the monitoring of SSL/TLS certificates for your organization's domains. Set up a workflow in Pipedream that periodically checks for new certificates using the Cert Spotter API. If a new, unexpected certificate is spotted, trigger an alert via Email, Slack, or another communication app integrated within Pipedream.
Compliance Verification: Create a Pipedream workflow that verifies the presence of SSL/TLS certificates for all your company's domains. Ensure they meet compliance standards by checking details like expiration dates and issuer credibility. If a certificate doesn't comply, the workflow could log the issue in a tool like Jira and notify the responsible team.
Incident Response Coordination: Kick off incident response protocols when an unauthorized certificate is identified. Use the Cert Spotter API within Pipedream to listen for such events and, upon detection, automatically create an incident ticket in a service management platform like ServiceNow, and page the security team through PagerDuty.

Authentication#

SSLMate — Cert Spotter API uses API keys for authentication. When you connect your SSLMate — Cert Spotter API account, Pipedream securely stores the keys so you can easily authenticate to SSLMate — Cert Spotter API APIs in both code and no-code steps.