Threat Intel Feed

Alert if a token you track is found in public breach data (integration with HaveIBeenPwned, GitGuardian).

Executive Dashboards

High-level risk overview: count of expiring assets by category, critical items, compliance status Cost tracking: total license/subscription costs, renewal dates, budget forecasting Team metrics: workspace activity, alert delivery success rates, response times Trend analysis: expiration patterns over time, peak renewal periods, historical incidents Compliance at a glance: audit log summaries, GDPR/FADP compliance status, certification coverage

License Management tools integration

Flexera, Snow, or Custom License Portals: track commercial software license keys/expiry.

Integration with more monitoring stack: New Relic, Datadog, Elasticsearch (metrics collection systems)

Periodic push system (or scraping?)

Identity Providers & SSO authentication (Cloud edition)

OIDC/SAML

Opsgenie webhook integration

Send expiring asset alerts to Opsgenie as incidents Create incidents when certificates/secrets expire or are about to expire Auto-resolve incidents when assets are renewed/updated Use Opsgenie's on-call routing for critical expirations

Allow multiple admins per workspace (Cloud edition)

An admin should be able to define other admins from members of a workspace or to pass the lead to another user

Allow user to store documents

Terraform integration (state file scanning)

Parse Terraform state files to extract resources with expiration dates Scan for certificates, secrets, API keys, and licenses managed by Terraform Import resources with their expiration metadata Track resources across multiple Terraform workspaces/projects

Telegram webhook integration

Alerts expiration Weekly digests Endpoint checker

Create playbooks and CI/CD templates to ease lifecycle management

Gitlab, Ansible, Jenkins, CircleCI, GitHub Actions, etc…

Auto-renewal

Actionnable buttons to trigger API based renewal actions (cloud providers or custom)

Incident response workflows

ITSM/ticketing tools Integration : token lifecycle related task (Jira, ServiceNow, GLPI, Trello/Asana, PagerDuty, etc…) : Auto-escalation: when critical assets expire, automatically create incidents in PagerDuty/Jira/Opsgenie Runbook automation: trigger predefined workflows (e.g., rotate keys, renew certificates) when thresholds are hit Post-mortem tracking: link expired assets to incident reports, track root causes On-call routing: route critical expiration alerts to the right on-call engineer based on asset ownership Incident prevention: analyze patterns to predict and prevent incidents before they occur Integration hooks: connect to incident management tools to create tickets, update status, and auto-resolve when assets are renewed

Integration with more vaults (secrets manager)

Gather secrets metadata from other vaults : Doppler, 1Password, Bitwarden, LastPass Enterprise Vaults, CyberArk

Bitbucket integration

Scan Bitbucket repositories for deploy keys, access tokens, and SSH keys Import repository secrets with expiration dates Track SSH key expiration across repositories

Allow multiple admins per workspace (Core + Enterprise editions)

An admin should be able to define other admins from members of a workspace or to pass the lead to another user

CertOps features

Described here https://github.com/tokentimerch/tokentimer-core/blob/main/ROADMAP.md#certops-program-certificate-lifecycle-orchestration

Identity Providers & SSO authentication (tokentimer-enterprise)

OIDC/SAML

On-premise version of TokenTimer (tokentimer-core + enterprise)

Risk based classification

Score of criticity per token based on permissions/privileges of the token (if applicable)

Token dashboard bulk edition

Allow to easily select tokens in the list to perform bulk operations such as change contact group, change section, change owner, etc…

Product tour and demo

(core/enterprise) Auto-sync: Multiple providers per workspace

As of today, one workspace can only have one provider of a kind so a user must create another workspace to have another similar provider setup (e.g. 2 Gitlab instances)

Add deduplication mechanism

New token matching name + location should merge content from old token and new one after user confirmation, both in manual creation and import features.

Intelligent Alerting

Email notifications Webhooks (Slack, Discord, Teams, PagerDuty, Generic) WhatsApp notifications

Import from Source Code Management platforms: Github and Gitlab

Public domains tracking

Scan public domains on a daily basis to ensure certificate is still valid