CertSpotter

Operates without a database, simplifying deployment and reducing maintenance overhead, as stated in the key features and README philosophy.

Uses a special parser that keeps certificates unparsed except for identifiers, ensuring no certificates are missed even with encoding errors, as detailed in the Security section to defend against adversarial attacks.

Implements defenses against null-byte attacks and correctly handles wildcard DNS names, enhancing detection accuracy for threats like subdomain takeovers, as explained in the Security section.

Supports email alerts and executable hooks for custom notification workflows, allowing integration with various systems, mentioned in the Quickstart and features.