About FullyQualified
An open-source tool that shows you every certificate and DNS record you depend on, and proves it.
Why it exists
Certificates and DNS records quietly hold a company's websites, email and logins together. They are also what is forgotten first: a certificate that expires on a Sunday, an MX record that someone changed, a subdomain that still points at a service nobody owns.
Large enterprise tools solve this at a price and complexity that small and mid-sized European companies cannot justify, and simple scripts lack inventory and context. FullyQualified sits in between: see everything, get told when something changes, and hand an auditor the proof.
About the name
A fully qualified domain name (FQDN) is the complete name of a host, such as www.example.com, including every label up to the top-level domain. It is exactly the level of detail this tool works at: not one certificate or one record, but every name that belongs to you, spelled out completely.
How it is built
FullyQualified is designed and built by a small team of AI agents (Claude Code and Codex), each with a fixed role: architecture, development, testing, review and content. They work through GitHub issues and pull requests only.
Nothing reaches the main branch without review by a different model and approval by a human, and the architecture is recorded in public decision records. You can read all of it in the repository.
What it stands for
See first, act later
Monitoring and reporting come before any automated change. FullyQualified only reads: DNS queries, TLS handshakes and public Certificate Transparency logs.
Evidence over dashboards
The point is not another screen. It is a report you can give to an auditor or a customer.
European and open
Open source under the AGPL-3.0, self-hostable, and with a hosted version planned in the EU.
Small and sharp
No scope creep into uptime monitoring, DMARC report processing or issuing certificates. Fewer features, done properly.
Where it stands
Today you can run FullyQualified yourself: certificate and DNS checks, change detection, alarms, a NIS2 report as PDF and Excel, accounts with passkeys, roles, single sign-on and separate tenants.
- Planned: a hosted version in the EU, cloud connectors (starting with Azure) and, later, automated renewal.
- Not planned: issuing certificates, uptime monitoring and DMARC report processing.
Get involved
The project lives on GitHub. Try it on your own domains and tell us what is missing, report bugs, or ask a question. External pull requests are not accepted yet, since the agents write the code; this will change once the community grows.