cert-manager vs Sectigo Certificate Manager
cert-manager
cert-manager.io
Sectigo Certificate Manager
sectigo.comSide by side
| Figure | cert-manager | Sectigo Certificate Manager |
|---|---|---|
| Price from | Free | $20.83/mo |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | — | Yes |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 6 |
| Spec score · Certificate Management Software | 8.0 (#10) | 7.6 (#21) |
| Integrations | Satellite projects include istio-csr, approver-policy, Kubernetes CSI drivers, csi-driver-spiffe, and trust-manager. | Sectigo says the platform offers more than 50 seamless integrations and supports ACME, SCEP, EST, and REST automation. |
| Support | Palo Alto Networks offers commercial support and FIPS builds as part of its Long Term Support offering. | Sectigo says it provides dedicated support and white-glove service from onboarding through continued account services. |
| Target users | The product is described for Kubernetes and OpenShift workloads that need managed certificates for public-facing or internal services. | SCM Pro is tailored for small and midsize organizations, web server administrators, growing businesses, and lean IT teams. |
Plans
Sectigo Certificate Manager
- Basic$25 a month
- Plus$100 a month
- Advanced$225 a month
- Basic$250 a year
- Plus$1,000 a year
- Advanced$2,250 a year
In their own words
cert-manager
cert-manager is a free, open-source tool for obtaining and managing X.509 certificates on Kubernetes and OpenShift. It requests certificates from public or private issuers, keeps them valid, and attempts renewal before expiration. The project automates TLS certificate issuance for Kubernetes Ingress and supports private-PKI certificates for pod-to-pod mutual TLS. Documented authority options include Let’s Encrypt, HashiCorp Vault, CyberArk Certificate Manager, and private PKI. Installation can use kubectl-applied manifests, Helm, Flux, or Argo CD. Related projects include istio-csr, approver-policy, Kubernetes CSI drivers, csi-driver-spiffe, and trust-manager; trust-manager distributes X.509 trust bundles and can run independently. cert-manager publishes threat-model and hardening guidance covering secrets, RBAC, networking, and Kubernetes configuration. Its default Helm values prioritize installation ease and backward compatibility over hardened production security. The project has no LTS releases, though each release is supported until the second subsequent version.
Sectigo Certificate Manager
Sectigo Certificate Manager has no write-up on Specifiction yet; its figures are above.