Live — monitoring CT logs in real time

The earliest buying signal.
Infrastructure, not intent.

Every SSL certificate issued on the internet is public by law (RFC 6962). Forelight reads them all — in real time — and delivers structured sales signals the moment a company launches new infrastructure.

Free tier · 100 requests/day · No credit card

Example signal — fired within minutes of cert issuance

{
  "signal_type": "saas_adoption_detected",
  "domain":      "store.acmecorp.com.myshopify.com",
  "apex_domain": "acmecorp.com",
  "detected_at": "2026-06-28T09:14:02Z",
  "saas_vendor": "Shopify",
  "company_name":     "Acme Corp",
  "company_industry": "retail",
  "hosting_provider": "Shopify",
  "signal_id":   "a3f1c2e0-..."
}

Four signal types. One API.

Every signal is timestamped to the minute and enriched with company data — not a probability score, a deterministic event.

new_apex_domain

New domain registered

A company just registered a new top-level domain — greenfield opportunity or competitive displacement play.

new_subdomain

Infrastructure expansion

A company is standing up new subdomains — product launches, regional rollouts, new services.

saas_adoption_detected

SaaS adoption

A company just connected Shopify, HubSpot, Salesforce, Vercel, or 40+ other platforms. Detected from cert patterns.

infrastructure_expansion

Rapid growth signal

Multiple new subdomains in 24 hours — a strong leading indicator of hiring, product launches, or geographic expansion.


Built for teams that move on signals.

Forelight delivers via REST API and webhooks — pipe it into Clay, HubSpot, Salesforce, or your own stack.

GTM & RevOps platforms

Add a net-new, differentiated signal type to your data offering. Forelight is a wholesale feed your customers don't have anywhere else.

🎯

B2B sales teams

Trigger outreach the day a prospect launches new infrastructure — before competitors know. "New Shopify store" is a buying window, not a cold call.

🔒

Attack surface management

Real-time certificate events for your domain namespace — catch shadow IT, unauthorized certs, and lookalike domains within minutes.

🔍

Competitive intelligence

Monitor competitors' subdomains as they appear — regional rollouts, new products, and staging environments visible before launch.

📈

Staffing & recruiting

Infrastructure expansion is a 20–30 day leading indicator of hiring. Reach the hiring manager before the job is posted.

💼

Venture & PE

Track portfolio companies and sourcing targets by infrastructure activity — traction without waiting for press releases.


How it works.

Forelight runs its own Certificate Transparency log follower — no scraping, no polling, no lag.

1

CT logs emit every certificate in real time

Every publicly trusted CA must log certificates under RFC 6962. Forelight reads those logs continuously — every cert issued anywhere on the internet appears within minutes.

2

We parse, enrich, and type each event

Raw cert metadata → domain extraction → DNS/ASN/hosting enrichment → SaaS vendor detection → firmographic data (company name, industry, size). Then classified into one of four signal types.

3

Deliver via API or webhook

Pull on demand with filters (industry, SaaS vendor, hosting provider, since timestamp) or push to your endpoint via webhook. Clay-ready flat JSON — no nested objects.


Why not just use intent data?

Existing intent data is lagged, probabilistic, and largely the same Bombora co-op resold many times. Forelight is different by design.

Property Forelight 3rd-party intent (Bombora/6sense) Technographics (BuiltWith)
Signal lag Minutes 24–48 hours Days to weeks (crawl schedule)
Deterministic Yes — cert either issued or not No — probability score No — inferred from crawl
Event-level Yes — timestamped to the minute Company-level only Install state, not adoption event
Data source Public by law (RFC 6962) Shared co-op (same feed, many vendors) Web crawl
SaaS adoption detection Real-time, at adoption Not available Stale installs

Simple, usage-based pricing.

Start free. Scale when you have signal volume worth paying for.

Free
$0
No credit card required
  • 100 API requests / day
  • All 4 signal types
  • Full enrichment data
  • Cursor pagination
  • Community support
Pro
$499/mo
~33,000 requests/day
  • 100,000 API requests / day
  • Webhook delivery
  • Watchlist filtering
  • Priority support
  • Custom signal types
Enterprise / Wholesale
Let's talk
Reseller & embedded pricing
  • Unlimited volume
  • SLA & dedicated support
  • White-label / embedded
  • Custom enrichment
  • Co-marketing opportunities

Start monitoring the internet in minutes.

Free tier · No credit card · Full API access