TokenTimer - Certificate lifecycle automation without private-key custody
by•
TokenTimer helps DevOps, SRE, security and IT teams discover expiring infrastructure assets and automate certificate lifecycles. Track TLS certificates, API keys, secrets and more, then renew and deploy certificates through customer-side automation while private keys stay in your infrastructure.

Replies
Hey Product Hunt 👋
I’m excited to launch TokenTimer today!
TokenTimer is an expiration lifecycle management platform for teams tired of firefighting preventable incidents and lacking clear ownership, visibility, and control over expiring assets.
I built TokenTimer after seeing the same problem over and over again in real production environments: the data existed, but it was scattered, had no clear owner, and nobody was really watching it.
With TokenTimer, teams can:
Get a single source of truth for all expiring assets
See what expires soon and what is actually critical
Assign ownership and collaborate across teams
Receive proactive alerts where they already work (Slack, Teams, Discord, etc...)
Stay secure by design with a metadata-only approach (no secret values stored)
TokenTimer integrates directly with cloud and developer platforms like AWS, Azure Key Vault, GCP, Vault, GitHub, GitLab, and Azure AD, so you don’t have to maintain yet another spreadsheet or script.
If you’ve ever thought “someone must be watching this, right?” and then had an incident anyway, this product is for you.
I’d love to hear your feedback, use cases, and ideas. Happy to answer any questions!