Skip to main content
Expira keeps every expiring credential in one list: SSL certificates, API tokens, IAM keys, OAuth secrets, domains, Apple certificates and licenses. Each one has an owner and a renewal link, and Expira alerts the right people before anything expires. You can add assets by hand, or connect a provider and let Expira find them. Connected providers are re-checked every day.

Quickstart

From sign-up to your first alert in a few minutes.

Connect a provider

AWS, GitHub, GitLab and App Store Connect.

Set up alerts

Email, Slack, Discord and webhooks, and when they fire.

Teams and roles

Who sees which assets and who can change settings.

What Expira stores

  • Tracked assets are metadata: name, type, expiry date, owner, team, environment, renewal link and notes. Expira never stores the secret value of a certificate or token it tracks.
  • Integration credentials are stored encrypted. To re-check a provider every day, Expira keeps the read-only credential you connect (for example an AWS access key or a GitLab token). It is never shown again after you save it, and it is deleted when you remove the integration. See Integrations overview.
Open the app at dashboard.expira.dev.