Purpose-built for UK MSPs

Every certificate. Every domain. Every client. Zero surprises.

Stop chasing certificate expiries across dozens of client estates. Tidehawk auto-discovers every certificate and domain across all your end-clients — and opens the PSA ticket before anything becomes an outage your retainer pays for.

No credit card required · Cancel anytime · UK data residency

5

PSAs integrated

Halo · ConnectWise · Autotask · Ninja · Syncro

LON1

UK data residency

Compute, data, backups, email

Live

CT log discovery

Continuous, real-time

Audit

Hash-chained log

Every action, tamper-evident

Everything your team needs

From discovery to alerting to PSA ticket creation — one platform for the full certificate lifecycle.

Auto-discovery

Every certificate ever issued for your clients' domains is found and tracked. Nothing slips through.

Continuous monitoring

Tidehawk watches around the clock — the moment a new certificate appears for any of your clients, it lands in your inventory.

Domain renewal tracking

Every domain's renewal date is tracked, so you're alerted long before it lapses.

PSA ticket auto-creation

When a cert hits your threshold, Tidehawk creates a ticket in your PSA with configurable priority.

Flexible alert engine

Rules per threshold (60/30/7/1 day). Email and PSA ticket channels. Per-client rules supported.

PDF & CSV reports

Branded expiry reports on demand. Filter by client and status. Share directly with end-clients.

Integrations5 / 5 live

Cert event in. Real ticket out.

Whichever PSA your team uses, Tidehawk creates the ticket the moment a certificate needs attention — automatically, every time. Same workflow you already use.

  • HaloPSA

    Tickets land in HaloPSA with the right priority, ready for your team to action.

    Connect once. Tickets keep flowing.

  • ConnectWise

    Tickets appear on your ConnectWise board, attached to the affected client.

    Pick the board you want, and you are done.

  • Autotask

    Tickets route to the right Autotask queue with priority that matches the urgency.

    Works with any Autotask region. No extra setup.

  • NinjaOne

    Tickets open in NinjaOne with all the cert detail your technicians need.

    Connect once and tickets land where your team already works.

  • Syncro

    Tickets drop into Syncro and are matched to the right customer automatically.

    Sign in once. Every cert event becomes a Syncro ticket.

One PSA, all of them, or none — switch any time without losing data.

Configure yours in under two minutes

Up and running in minutes

Add a client, paste their domains, and Tidehawk handles the rest.

1

Add your clients

Create a client per end-customer. Paste domains in bulk. Tidehawk validates and deduplicates.

2

Discovery runs automatically

Tidehawk works in the background, finding every certificate across your clients. New certs appear in your inventory within minutes.

3

Alerts fire, tickets open

When a cert hits a threshold, your team gets an email and/or a PSA ticket with full context.

What changes for your MSP

Real outcomes the day you connect your first client estate — no fire drills, no spreadsheets, no Sunday discovery scripts.

Less Sunday work

Stop running cron-style discovery scripts because a client cert expired Monday morning. Tidehawk runs continuously so your team is never the discovery system.

Audit-ready clients

Branded PDF reports per client, on demand. Every alert, action, and renewal stamped in a hash-chained log your clients can request anytime.

Tickets your team already actions

Cert events drop into your PSA — HaloPSA, ConnectWise, Autotask, NinjaOne, Syncro — with the right priority and full context. Same workflow, no retraining.

Built for UK MSPs, GDPR-first

All compute and data runs on DigitalOcean LON1 (London). AES-256-GCM encryption at rest. PostgreSQL row-level security keeps every tenant's data fully isolated.

  • All data stored in DigitalOcean LON1 (London)
  • AES-256-GCM encryption at rest for all credentials
  • PostgreSQL row-level security — tenants fully isolated
  • Full audit log: every action, user, timestamp, IP address
  • GDPR Data Processing Agreement available on request
  • TOTP two-factor authentication for all accounts

// data residency

ComputeDigitalOcean LON1
DatabasePostgres 16, LON1
Email deliveryAWS SES eu-west-2 (London)
Error monitoringLON1
PaymentsStripe (PCI-DSS Level 1)
DNSCloudflare DNS only, no proxy

Frequently asked questions

What is Tidehawk?
Tidehawk is a SaaS platform for UK MSPs to discover, monitor, and alert on certificates and domain registrations across all end-clients. It integrates with your PSA to create tickets automatically before anything expires.
How does certificate discovery work?
Tidehawk works in the background to find every certificate ever issued for your clients' domains, plus connects directly to live servers to capture what's actually running in production. Both flow into one inventory automatically — nothing for you to schedule.
Which PSA platforms are supported?
HaloPSA, ConnectWise Manage, Autotask/Datto, NinjaOne, and Syncro are all fully supported. Configure any of them from the Integrations page in under two minutes.
How does the 14-day trial work?
Sign up and get full Growth-plan access for 14 days with no card required. On days 11 and 13 we send reminder emails. At day 14 the account moves to read-only for 7 days, then suspends.
Is my data stored in the UK?
Yes. All customer data is hosted in London (DigitalOcean LON1); transactional email is sent from AWS London. Certificate-transparency look-ups use the providers listed in our sub-processor register.
Can I track domain registrations too?
Yes. Tidehawk tracks the renewal date for every domain you monitor, and you can set the same alert rules you use for certificates.
What is Founder pricing?
The first 20 workspaces get founder pricing locked for 24 months, applied automatically at checkout with no code to enter: Starter £49/mo (normally £99), Growth £149/mo (normally £249), Scale £399/mo (normally £599).
Do you offer a Data Processing Agreement?
Yes. A GDPR-compliant DPA is available to all subscribers. Email hello@tidehawk.co to request one.

Ready to stop chasing certificate expiries?

Join UK MSPs using Tidehawk to protect their clients automatically.