ReportFormat / 02
Domain Health Report
Shows public SSL, domain-registration, and DNS evidence for every monitored domain, plus a Domain Governance Review of missing owners, missing purposes, and undecided renewals from your own records.
On demand
Sample reports
Inspect the deliverable before you sign up.
Static, fictional examples of every real CertPilot report format. Review the current public sample PDFs, source boundaries, and report structure before adding your own data. Nothing here is a live customer account.
Fictional demo dataSix formats · static PDFs · reports generated on demand
Featured report
Governance Evidence Pack
The format that best represents the platform: public checks and customer-maintained registers brought into one dated cross-module summary.
C
Demo / illustrativeGovernance Evidence Pack
- Period
- Demo period
- Scope
- Demo workspace
- Source
- Checks + registers
01Observed
External footprint — SSL, DNS, RDAP
02Example gap
Email authentication coverage
03Review
Renewal risk register
04Current
Access review completion
05Observed
Vendor status context
Fictional workspace · no customer dataOperational evidence · not certification
Generate this pack from your own workspace. Add your domains and the registers you already keep, then produce a dated report on demand. 14-day free trial, no credit card.
Start free trialSupporting formats
Five more real report formats.
Each format draws on the same checks and maintained registers for a different reader. Open any sample to inspect the full PDF.
ReportFormat / 03
Renewal Risk Report
Shows upcoming and overdue renewal risk alongside owners, dates, notice windows, open decisions, and incomplete records that need follow-up.
On demand
04
Monthly Proof Report
Shows a dated monthly summary of what was protected, domain health, DNS changes, email-authentication evidence, renewal risk, and counts-only access-review and register evidence.
Generated on demand for a monthly period
Who uses it
Agencies use it as a monthly client deliverable; IT teams and MSPs use it for concise management updates.
What's inside
- What Was Protected: a plain-English story of the period
- Domain health, DNS changes, and email-authentication evidence
05
Weekly Governance Report
Shows a short governance snapshot of recent domain, certificate, DNS, renewal, email-authentication, and access-review signals, with counts from the maintained registers.
On-demand only — no automated weekly delivery
Who uses it
IT teams use it during a weekly review ritual; MSPs can generate it for an operational client check.
What's inside
- This week's story and current risk snapshot
- SSL renewal window, domain-expiry watch, and DNS review signals
06
Access Review Register
Shows who signed off the latest access review and when, plus a dated register of access records, review states, and the follow-up still required.
On demand after review sign-off
Who uses it
IT leads use it for audit-preparation or insurance conversations and for quarterly access-review evidence.
What's inside
- Latest completed review: who signed off, when, and the register snapshot
- Overdue reviews flagged individually
Where reports come from
Every section traces back to a check or a register.
Reports are assembled from public-signal results and customer-maintained records. The source category and scope remain visible so the reader can understand the basis and limits.
Observed outside
SSL, DNS, email authentication, RDAP, and official vendor status.
→ Domain Health · public-signal sections
Recorded by your team
Renewals, people, assets, systems, access reviews, decisions, owners, and sign-off.
→ Renewal Risk · access-review sections
One dated artifact
Both inputs brought into a readable report with scope and limits stated.
→ Governance Evidence Pack
Domain Health workflow today
What is in the PDF, and what stays in the workspace.
01
Technical domain health
In the PDF
SSL status and expiry, domain/RDAP registration expiry where available, DNS records, and an overall status per domain.
02
DNS change evidence
In the PDF
What changed in public DNS records between checks. This is read-only evidence, not DNS restore.
03
Domain Governance Review
In the PDF
Customer-entered owner, purpose, lifecycle status, renewal decision, and last-reviewed date, shown as review gaps beside the automated checks.
04
SSL readiness
Workspace only
Customer-entered management method, automation status, and readiness notes on each domain. CertPilot does not issue or renew certificates.
05
Email sending sources
Workspace only
A customer-entered register of systems that send mail from a domain. CertPilot does not scan mailboxes or send email.
How reports are generated
Checks and records, assembled on demand.
CertPilot checks monitored domains daily. SSL evidence comes from a live TLS handshake; domain-registration expiry comes from RDAP; DNS and email-authentication evidence comes from public DNS records. Renewal, people, assets, systems, and access-review evidence comes from registers your team enters or imports.
Each report uses the inputs relevant to that format. Generate the next dated snapshot from the dashboard when you need it; there is no automated Weekly Governance delivery or connector-enriched report data.
What a report is not
Evidence — not a certificate.
A report is
- A dated record of what was checked and reviewed
- Scoped, with sources and limits stated
- Assembled from public signals and customer-maintained records
- Something a person can read, question, and act on
A report is not
- A compliance certification
- An audit guarantee or professional sign-off
- A vulnerability scan or penetration test
- An uptime monitor
- Employee monitoring or private-content inspection
- A connector read from Microsoft 365, Google Workspace, or an identity provider
- Legal advice
Demo reports use fictional data. Live reports document operational evidence; they do not certify compliance or replace an auditor's judgement.
Related reading
Go deeper on the evidence model.
Review the module and operating guides behind the public checks, maintained context, and report boundaries.
External Footprint Monitoring
See how public DNS, SSL, domain-expiry, governance, SSL-readiness, and sending-source context fit together.
Read moreEvidence Reports
Understand the report set and the boundaries of generated evidence PDFs.
Read more47-Day SSL Certificates
Learn what IT teams should track before shorter certificate lifetimes become operationally painful.
Read moreDomain Governance Register
Learn what to record for every company domain beyond simple inventory.
Read moreDNS Change Evidence
Learn how snapshots and before/after changes support domain portfolio review.
Read moreFrom sample to your own
Generate evidence from your own checks and registers.
Add the domains and maintained records each report needs, review the current evidence, and generate the relevant format on demand.