Never miss an expiring Microsoft Secret.
SecretExpiry watches client secrets and certificates of every app registration across your Entra tenants and tells you by e-mail, Teams or Slack before anything expires.
- No payment details required
- Set up in 2 minutes
- Metadata only, no secret values stored
SecretExpiryOverview
3 tenants · 47 credentials · synced today 08:00
Overdue
1
Critical
2
Due soon
1
Fine
43
Urgent
All 47 credentials
Hmm... when did that customer certificate expire again?
That brief moment of panic. Did your colleague renew the Contoso secret last week, or does it expire tomorrow? The spreadsheet is out of date, nobody saw the calendar reminder. At some point a customer application goes down, and nobody knows why.
Relax.
We're watching the clock.
Instead of clicking through 50 customer tenants, you let SecretExpiry run in the background. It checks every expiry date daily and speaks up before time runs out. Meanwhile you get on with your projects.
Monitoring in three steps.
No agent, no script.
Sign in
admin@company.comSend login linkor with Microsoft
1Create an account
Sign in with a magic link or your Microsoft account. 14 days free, no payment details.
Permissions requested
SecretExpiry would like to (read-only):
Read app registrations
Application.Read.All
Read Intune configuration
DeviceManagementServiceConfig.Read.All
Read the tenant name
Organization.Read.All
Accept2Connect a tenant
One admin consent in the Entra portal is all it takes: read access to app registrations, never to secret values.
Thresholds (days before expiry)
90301471+ daysin 7 days: Contoso · Apple MDM Push3Lean back
The first sync starts right away, then runs daily. Alerts go out 90, 30, 14, 7 and 1 day before expiry. You set the thresholds and the cadence yourself.
Built for MSPs and IT admins.
Secrets and certificates of all your customers in one place, without much effort.
Every tenant in one cockpit.
All customers in one overview, the most urgent credentials at the top.
Alerts where you work.
The same alert arrives by e-mail, in Teams, in Slack and as an entry in your calendar. Every tenant can have its own recipient address.
E-mail
Teams
Slack
CalendarThresholds and weekly digest
90, 30, 14, 7 and 1 day before expiry, right away or bundled on Mondays.
Secrets and certificates
Client secrets and X.509 certificates of every app registration, plus Apple MDM Push, VPP and ADE tokens from Intune.
Snooze, mark as reviewed
Known cases and legacy leftovers disappear from alerts and counters.
Search, filters, CSV export
Ctrl+K, status filters, export of the matches and a direct link into the Entra portal.
Plain-text mails for ticket systems
Arrives readable in Autotask, Jira and other ticket systems.
Connection in view
Notice e-mail when consent is revoked or the sync keeps failing.
One price per tenant
The more tenants you monitor, the less each one costs.
- Unlimited app registrations and credentials
- Daily sync of every tenant
- E-mail, Teams, Slack and calendar feed
- Secrets and certificates
- SEPA, credit card and bank transfer
- Support by e-mail
14-day free trial, no payment details required. All prices excl. VAT. Cancel anytime.
What we see and where it lives.
Privacy at SecretExpiry
SecretExpiry reads metadata only, stores it in Frankfurt and encrypts what is confidential.
Zero-knowledge
We request metadata only: names, IDs and expiry dates, plus the Apple ID from Intune. We store no secret or token values.
EU hosting in Frankfurt
Authentication, database and hosting run in Frankfurt. The providers involved are listed in the privacy policy.
Encryption and access control
TLS for every connection, row-level security in the database, Content Security Policy, rate limiting and AES-256 for sensitive parameters.
All details are in the privacy policy.
Frequently asked questions
What IT admins and MSPs want to know before they start.
The next expiry is coming for sure.
Connect your first tenant in two minutes. The next alert arrives before anyone notices.
…and everyone keeps working peacefully.