Design preview · light mode

Every certificate for your domains.
Nothing you didn't expect.

This page is generated straight from tokens/design-tokens.json — it exists so CI has a real rendered page to run accessibility audits against, and so a reviewer can see the light palette applied to actual component patterns rather than reading hex codes.

Foundations

Color tokens

bg
#f7f9fa
surface
#ffffff
surface-2
#eef2f4
border
#d7dee2
border-soft
#e9edf0
ink
#0b1116
ink-muted
#3f4f57
ink-faint
#55666e
accent
#0f9c8c
accent-dim
#0a7568
accent-ink
#04120f
warn
#8f5b0f
danger
#c53c22

Foundations

Type scale

Every certificate
Built around three pillars
Security
Self-hosted by design — your domain list and findings never leave infrastructure you control.
Why Merkleye
20–30M CT log entries tailed per day

Components

Cards, pills & code

Security

Self-hosted by design — your domain list and findings never leave infrastructure you control.

Speed

Firehose ingestion means detection latency is bounded by CT log propagation, not polling.

Accuracy

Tuned to keep the signal-to-noise ratio survivable across routine renewals.

Roadmap pills

CT log ingestion Policy engine dnstwist lookalike pipeline Web UI (merkleye-ui)

Code block

# cert observed on a CT log, seconds after issuance
domain:   secure-paypaI.com  ← homoglyph of paypal.com
issuer:   Let's Encrypt (unexpected: not authorized)
score:    87 / 100  (additive, explainable)