Create your account

All plans are for professional use. Every new organization starts on a full 30-day Business trial without a payment card.

Sign up

Go to app.nocert.io and select Create an account.

Enter the email you use for work. A domain supplied on the website is kept as a monitoring suggestion; it does not change your email address. You can also continue from the website without supplying a domain.

Tick the consent box, which covers the terms, the privacy policy, the data processing agreement, business use, and your authority to scan your company’s assets.

Enter the 6-digit code that arrives by email. It expires after 20 minutes.

Your organization name is independent of your email domain. Rename it in Settings → Organization.

Why is my email address rejected?

Gmail, Outlook and other permanent webmail addresses are accepted for professional accounts. Disposable email domains are refused.

Your account email does not add a monitoring domain or start discovery. Select an authorized perimeter separately: a public domain under Domains, or internal sources through a Sentinel.

Do I need a password?

No. Accounts are created without one, and you sign in with a fresh code each time.

You can set a password later in Settings → Profile, which asks for a new code to confirm. Do that first if you want two-factor authentication: NoCert refuses to enable 2FA on an account with no password. Both are required to finish the owner’s setup checklist; you can start monitoring while completing it.

What happens after you sign up?

Your organization starts on the Business trial. Choose what to monitor offers two paths: Add a domain, with an editable suggestion and DNS verification, or Install a Sentinel for internal services. An internal-only deployment does not require a public domain. Go to my workspace lets you finish setup later from the dashboard.

You get an email notification target addressed to you and the Default Rule, at 7 days before expiry. The default rule cannot be deleted or disabled and does not consume the user-rule quota. Example rules are available as templates; they are not automatically enabled.

A compliance policy set is chosen from the country you signed up from, always including the Mozilla baseline.

Monitor your first domain covers public discovery and proof of control. Install the Sentinel covers internal sources.

A colleague wants access

Sending them to the signup page puts them in a separate organization, even on the same company domain, and the two will not see each other’s certificates.

An owner adds them instead, from Settings → Local Users.

The trial

Every Business feature is live during the trial, within the plan’s usage limits, including single sign-on and the compliance workspace. The days remaining show in a strip at the top of the app.

When the trial ends, Free keeps monitoring and email alerts for 50 active certificates, 2 Sentinels, the owner account, and 3 user notification rules, plus the default rule. One generic Discord channel can send alerts without asset details. Slack, Teams and Business features pause.

Excess members and rules pause while their configuration, roles and scopes are retained. Excess Sentinels have a fixed 30-day grace period; the owner can choose which two to keep. Above 50 active certificates for seven days, expansion pauses. Reads, monitoring, alerts, exclusions, deletion and repair remain available.

No paid plan starts automatically. Staying on Free does not schedule account deletion.

Activating a plan from Settings → Billing starts billing immediately and ends the trial.