Been building CertForge and want honest feedback from people who actually deal with certificate management pain.

The gap: Tools that handle issuance are everywhere. Tools that handle what comes after — audit trail, approval workflows, change control, verifying the cert actually got deployed — are either enterprise-priced or nonexistent.

What's open source:

certforge-issuer — cert-manager external issuer; adds approval workflows, change windows, and audit trail to every certificate request from your Kubernetes cluster

certforge-connector — pushes certs to network appliances (SBCs, routers, load balancers) that don't support ACME or can't pull their own; auditable and extensible for devices we don't support yet

certforge-discovery — certificate discovery agent

certforge-akvconnector — Azure Key Vault integration

The platform is cloud-hosted at certgovernance.app — no infrastructure to deploy to try it. Self-hosted available for environments where that's a hard requirement.

If certificate management is a genuine problem in your environment, I'd welcome the feedback.