Design preview · dark mode

Every certificate for your domains.
Nothing you didn't expect.

This page is generated straight from tokens/design-tokens.json — it exists so CI has a real rendered page to run accessibility audits against, and so a reviewer can see the dark palette applied to actual component patterns rather than reading hex codes.

Foundations

Color tokens

bg
#05080a
surface
#0b1116
surface-2
#101922
border
#1c2830
border-soft
#141d24
ink
#e7eef2
ink-muted
#8fa1ab
ink-faint
#5c7078
accent
#35d0c0
accent-dim
#1c8f85
accent-ink
#04120f
warn
#e8a33d
danger
#e8654a

Foundations

Type scale

Every certificate
Built around three pillars
Security
Self-hosted by design — your domain list and findings never leave infrastructure you control.
Why Merkleye
20–30M CT log entries tailed per day

Components

Cards, pills & code

Security

Self-hosted by design — your domain list and findings never leave infrastructure you control.

Speed

Firehose ingestion means detection latency is bounded by CT log propagation, not polling.

Accuracy

Tuned to keep the signal-to-noise ratio survivable across routine renewals.

Roadmap pills

CT log ingestion Policy engine dnstwist lookalike pipeline Web UI (merkleye-ui)

Code block

# cert observed on a CT log, seconds after issuance
domain:   secure-paypaI.com  ← homoglyph of paypal.com
issuer:   Let's Encrypt (unexpected: not authorized)
score:    87 / 100  (additive, explainable)