What it does

Monitors CT logs in real-time and prints domains matching your regex pattern. Useful for domain monitoring, brand protection, security research, and finding new subdomains.

Real-time Monitoring

Monitor Certificate Transparency logs in real-time with configurable polling intervals

Privacy-First

Local processing means your data never leaves your machine

Lightweight

Minimal resource usage with efficient regex pattern matching

Flexible

Customizable patterns, batch sizes, and CT log selection

Checkpoint System

Resume monitoring from where you left off with persistent checkpoints

Multi-Instance

Run multiple monitoring instances in parallel for different patterns

Quick Start Examples

Get started with CertPatrol in minutes. Here are some common use cases:

Basic Domain Monitoring

# Find domains containing "example"
certpatrol --pattern "example"

# Find shop subdomains of amazon.com
certpatrol --pattern "shop.*\.amazon\.com$"

Advanced Pattern Matching

# Multiple patterns
certpatrol --pattern "(petsdeli|pet-deli)" --verbose

# API subdomains
certpatrol --pattern "api.*\.google\.com$"

# All subdomains of a domain
certpatrol --pattern ".*\.example\.com$"

Production Usage

# Run multiple instances
certpatrol --pattern "domain1" &
certpatrol --pattern "domain2" &

# Match against base domains only
certpatrol --pattern "argentina" --etld1

Installation

CertPatrol is now available as a pip package for easy installation:

# Install from PyPI
pip install certpatrol

# Start monitoring immediately
certpatrol --pattern "your-pattern"

Alternatively, you can still install from source:

# Clone the repository
git clone https://github.com/ToritoIO/CertPatrol.git
cd CertPatrol

# Install dependencies
pip install -r requirements.txt

# Start monitoring
python certpatrol.py --pattern "your-pattern"