Live — monitoring CT logs in real time

The earliest buying signal.
Infrastructure, not intent.

What if you knew the day a company adopted Shopify — 48 hours after it happened, not three weeks later? Forelight reads every SSL certificate issued on the internet in real time (public by law under RFC 6962) and delivers deterministic infrastructure signals before your competitors see them.

Free tier · 100 requests/day · No credit card · Minutes of lag, not weeks

Already have a key? Upgrade plan · Lost your key?

One API call. One buying signal.

$ curl -s "https://forelight.net/v1/signals?type=saas_adoption_detected&limit=1" \ -H "Authorization: Bearer YOUR_API_KEY" { "data": [{ "signal_id": "a3f82c1d-4e90-4b7a-8c3f-1d2e5f6a9b0c", "signal_type": "saas_adoption_detected", "domain": "boutiquebrandsco.com", "apex_domain": "boutiquebrandsco.com", "detected_at": "2026-07-01T09:14:22Z", "saas_vendor": "Shopify", "hosting_provider": "Cloudflare", "company_name": "Boutique Brands Co", "company_industry": "ecommerce", "score": 75, "score_reason": "SaaS platform adoption detected at cert issuance; detected 1h ago (score: 65 +10 recency)" }], "total": 7812, "next_cursor": "MjAyNi0w...", "effective_since": "2026-04-02T09:14:22Z", "watchlist_active": false }

Sample signals — this is what lands in your API response

Score Signal type Company Detail Detected
100 domain_velocity
Meridian Health
meridianhealth.com
4 new domains in 7 days — acquisition or rebrand 18 min ago
95 geographic_expansion
Stackline Inc
stackline.de
Country-code domain — entering German market 1h ago
80 fresh_domain
Launchify
launchify.io
Domain registered 6 days before first cert — new company 2h ago
75 saas_adoption_detected
Boutique Brands Co
boutiquebrandsco.com
Adopted Shopify — retail, 51–200 employees 3h ago
75 saas_adoption_detected
NovaTech Solutions
novatech.io
Adopted HubSpot — technology, 11–50 employees 4h ago
60 wildcard_cert_issued
GrowthStack
*.api.growthstack.com
Wildcard cert — dynamic subdomain build-out 6h ago

Representative sample · Each row is one API call result · Scores include recency boost


Eight signal types. One API.

Every signal is timestamped to the minute, enriched with company data, and scored 1–100 — not a probability estimate, a deterministic event with a buying-signal weight.

domain_velocity  ·  score 90

Domain velocity

A company registered 3+ new domains in 7 days — acquisition prep, major product launch, or rebrand. Highest-conviction signal.

geographic_expansion  ·  score 85

Geographic expansion

A company registered a country-code domain (.de, .fr, .uk, .au, 60+ markets) — entering a new geographic market.

fresh_domain  ·  score 80

Fresh domain

Domain registered ≤30 days before first cert — brand new company launching infrastructure. No vendor relationships yet. First mover wins.

wildcard_cert_issued  ·  score 70

Wildcard cert issued

*.company.com — building out dynamic subdomain infrastructure. Strong signal for multi-tenant SaaS, customer portals, or new product lines.

saas_adoption_detected  ·  score 65

SaaS adoption

A company just connected Shopify, HubSpot, Salesforce, Vercel, or 40+ other platforms. Detected from cert patterns at adoption time.

infrastructure_expansion  ·  score 50

Rapid growth signal

5+ new subdomains in 24 hours — leading indicator of hiring, product launches, or regional rollouts.

new_apex_domain  ·  score 40

New domain registered

A company just registered a new top-level domain — greenfield opportunity or competitive displacement play.

new_subdomain  ·  score 20

New subdomain

A company is standing up new subdomains — product launches, regional rollouts, new services.


Built for teams that move on signals.

Forelight delivers via REST API and webhooks — pipe it into Clay, HubSpot, Salesforce, or your own stack.

GTM & RevOps platforms

Add a net-new, differentiated signal type to your data offering. Forelight is a wholesale feed your customers don't have anywhere else.

🎯

B2B sales teams

Trigger outreach the day a prospect launches new infrastructure — before competitors know. "New Shopify store" is a buying window, not a cold call.

🔒

Attack surface management

Real-time certificate events for your domain namespace — catch shadow IT, unauthorized certs, and lookalike domains within minutes.

🔍

Competitive intelligence

Monitor competitors' subdomains as they appear — regional rollouts, new products, and staging environments visible before launch.

📈

Staffing & recruiting

Infrastructure expansion is a 20–30 day leading indicator of hiring. Reach the hiring manager before the job is posted.

💼

Venture & PE

Track portfolio companies and sourcing targets by infrastructure activity — traction without waiting for press releases.


How it works.

Forelight runs its own Certificate Transparency log follower — no scraping, no polling, no lag.

1

CT logs emit every certificate in real time

Every publicly trusted CA must log certificates under RFC 6962. Forelight reads those logs continuously — every cert issued anywhere on the internet appears within minutes.

2

We parse, enrich, and type each event

Raw cert metadata → domain extraction → DNS/ASN/hosting enrichment → SaaS vendor detection → firmographic data (company name, industry, size). Classified into seven signal types and scored 1–100 by buying-signal strength.

3

Deliver via API or webhook

Pull on demand with filters (industry, SaaS vendor, hosting provider, since timestamp) or push to your endpoint via webhook. Clay-ready flat JSON — no nested objects.


Why not just use intent data?

Existing intent data is lagged, probabilistic, and largely the same Bombora co-op resold many times. Forelight is different by design.

Property Forelight 3rd-party intent (Bombora/6sense) Technographics (BuiltWith)
Signal lag Minutes 24–48 hours Days to weeks (crawl schedule)
Deterministic Yes — cert either issued or not No — probability score No — inferred from crawl
Event-level Yes — timestamped to the minute Company-level only Install state, not adoption event
Data source Public by law (RFC 6962) Shared co-op (same feed, many vendors) Web crawl
SaaS adoption detection Real-time, at adoption Not available Stale installs

Simple, usage-based pricing.

Start free. Scale when you have signal volume worth paying for.

Free
$0
No credit card required
  • 100 API requests / day
  • All 7 signal types
  • Signal scoring (1–100)
  • Last 24 hours of signals
  • Full enrichment data
  • Cursor pagination
Growth
$299/mo
~13,000 requests/day
  • 40,000 API requests / day
  • 60 days of signal history
  • Batch lookup (up to 50 domains)
  • Webhook delivery
  • Watchlist filtering
  • Email support
Already have a key? Upgrade →
Pro
$499/mo
~33,000 requests/day
  • 100,000 API requests / day
  • 90 days of signal history
  • Batch lookup (up to 50 domains)
  • Webhook delivery
  • Watchlist filtering
  • Priority support
Already have a key? Upgrade →
Enterprise / Wholesale
Let's talk
Reseller & embedded pricing
  • Unlimited volume
  • Full signal history
  • SLA & dedicated support
  • White-label / embedded
  • Custom enrichment
  • Co-marketing opportunities

Start monitoring the internet in minutes.

Free tier · No credit card · Full API access