Managed custom-domain SSL

Effortless SSL
Management

Connect customer domains to a project-specific DNS target, track SSL setup in the app, and forward active traffic to your configured endpoint.

Create Account See how it works
Lifecycle state Visible
AVG SPEED
Tracked
PROJECT DNS TARGET
Assigned

Built for SaaS teams managing customer domains

Managed SSL Project API Origin routing Webhooks Usage billing Lifecycle status
4 plans
Plans for growing usage
Tracked
Domain setup progress
Live
Certificate status

How it works

Managed SSL without certificate queues

A guided path from endpoint validation to active customer domains.

DNS Configuration NAME TYPE VALUE @ A 93.184.216.34 *.app CNAME project.sslforsaas.io mail MX mail.provider.com CNAME propagated · TTL 300s
Configure your CNAME
Set up a single CNAME record in your DNS. Your customers point their custom domains to it — that's the only setup required on your end.
domain *.app.com Cloudflare Managed SSL CERT TLS 1.3 ✓ Provider managed
Automatic certificate issuance
Add each domain in the dashboard or via the API, then configure its DNS. DNS alone does not register a domain. Track asynchronous provisioning in the app.
Issue Serve Renew Monitor AUTO ∞ 90 days auto-renew
Lifecycle fully managed
Renewals, reissuance, revocations — all handled automatically. Your team is free to build product, not manage certificate queues.

Managed SSL security

Enterprise-grade SSL, without the enterprise pain

Give customers branded domains with managed SSL. Monitor lifecycle status and resolve DNS or certificate validation issues from the app.

  • Managed certificate renewals
    Cloudflare manages certificate issuance and renewal while SSLforSaaS shows each domain's status in the app.
  • TLS 1.3 by default
    TLS 1.3 is the default for new hostnames. Project settings can select a minimum of TLS 1.2 or 1.3; existing hostnames are not rewritten.
  • Global edge infrastructure
    Cloudflare handles edge traffic. Setup time depends on DNS and certificate validation.
TLS 1.3 Cloudflare Edge provider Managed SSL Lifecycle status app.client1.com portal.client2.io dash.client3.com secure.client4.net DOMAIN STATUS ACTIVE RENEWAL MODE MANAGED STATUS SOURCE Tracked
SSLforSaaS Project API # Provision SSL certificate POST /workspaces/{w}/projects/{p}/domains Authorization: Bearer {PROJECT_API_KEY} Content-Type: application/json {"domain": "app.yourcustomer.com" } SEND → 202 ACCEPTED · ASYNC { "status": "active" "domain": "app.yourcustomer.com" "tls_version": "TLSv1.3" "valid_until": "2026-06-28T09:41:26Z" } ENDPOINTS POST /workspaces/{w}/projects/{p}/domains Queue domain GET /workspaces/{w}/projects/{p}/domains/{d} Certificate status DEL /workspaces/{w}/projects/{p}/domains/{d} Delete domain GET /workspaces/{w}/projects/{p}/domains List all domains

Developer-first API

Integrate through one project-scoped API

A clean project-scoped REST API with webhooks and practical docs. Everything your engineers need to connect customer domains safely.

  • Project-scoped REST API
    Use project API keys with scoped domain and metrics routes. Public SDKs are not required for the first integration path.
  • Webhook events
    Subscribe to the current domain, SSL issue, limit, provisioning-failure, and user-action event catalog.
  • Project API reference
    Read authentication, request, response, and webhook examples in the API documentation.

Pricing

Simple, scalable pricing

Choose the capacity you need and scale as your customers grow. No per-certificate charges.

Save 10%

All plans include managed SSL provisioning, project-scoped API access, and domain status in the app. Extra domains are billed monthly.

Lite
$22.50/mo*
Up to 100 custom domains
Automatic SSL provisioning
Managed certificate renewals
Project-scoped REST API
Custom origin routing
$0.50 / extra domain
Get started
Basic
$53.10/mo*
Up to 300 custom domains
Everything in Lite
Project webhook events
Project metadata
$0.30 / extra domain
Get started
Standard
$80.10/mo*
Up to 500 custom domains
Everything in Basic
Custom request headers
Path rewrites
$0.25 / extra domain
Create account
Enterprise
Custom
Custom domain capacity
Everything in Standard
Capacity and support tailored to your needs
Contact sales
Lite
$22.50/mo*
Up to 100 custom domains
Automatic SSL provisioning
Managed certificate renewals
Project-scoped REST API
Custom origin routing
$0.50 / extra domain
Get started
Basic
$53.10/mo*
Up to 300 custom domains
Everything in Lite
Project webhook events
Project metadata
$0.30 / extra domain
Get started
Most popular
Standard
$80.10/mo*
Up to 500 custom domains
Everything in Basic
Custom request headers
Path rewrites
$0.25 / extra domain
Create account
Enterprise
Custom
Custom domain capacity
Everything in Standard
Capacity and support tailored to your needs
Contact sales

* Billed annually. Monthly equivalent shown.

app.client.com ✓ portal.eu.io ✓ dash.asia.co ✓ secure.br.com ✓ app.au.net ✓ Project-scoped lifecycle visibility
Why SSL matters

SSL is no longer optional —
it's the baseline your customers expect.

HTTPS is a baseline expectation for customer-facing domains. SSLforSaaS gives SaaS teams one project-scoped workflow for domain onboarding, lifecycle visibility, and origin routing.

app.yourclient.com ✓ SSL TLS active
Customer trust & conversions
A valid certificate avoids browser security warnings and gives customers the expected HTTPS connection on branded domains.
IN TRANSIT EDGE TLS HTTPS TLS 1.3 256-bit
Encrypted transport
TLS protects data in transit, but transport encryption alone does not certify your product for any regulatory framework.
https://app.yourclient.com G #1 app.yourclient.com ✓ HTTPS #2 competitor.com ✓ HTTPS #8 nossl.com ⚠ Not Secure +SEO
SEO & search ranking
Browsers can warn visitors about unencrypted connections. Managed SSL helps secure the connection; it does not guarantee search rankings or traffic.
Issue Serve Renew Watch AUTO ∞
Certificate expiry risk
An expired certificate can interrupt a customer domain. Managed renewal and visible lifecycle state reduce that risk but still require monitoring.
acme.com Secure ✓ portal.io Secure ✓ app.saas.com Secure ✓
Your customers' brand reputation
A browser security warning can undermine customer trust. Managed SSL helps secure the connection to your application.
POST /workspaces/{w}/projects/{p}/domains domain: "app.customer.com" 200 status: "active" Catalog limits · visible state
Scale without the overhead
Managing SSL manually across hundreds of customer domains is a full-time job. One API call, fully automated — your team ships features instead.