How does Caddy automatically obtain TLS certificates?

By default, Caddy automatically obtains and renews TLS certificates for all your sites. With On-Demand TLS, Caddy obtains, renews, and maintains certificates on-the-fly during TLS handshakes, which is perfect for customer-owned domains in white-label SaaS applications.

What compliance requirements does Caddy meet?

Caddy's TLS defaults are secure and pass PCI, HIPAA, and NIST compliance requirements without requiring any additional configuration.

Can Caddy be extended with plugins?

Yes, Caddy can be extended by compile-time plugins which compile as native code. Nearly every part of the configuration that does something is pluggable, offering unlimited capabilities in a lean package. Plugins are written as Go packages and compile into the static binary.

How does Caddy handle multiple instances for certificate management?

Multiple Caddy instances configured with the same storage automatically coordinate certificate management as a fleet. They share resources such as keys and OCSP staples, and coordinate cluster operations automatically.

Hosting, Cloud & Infrastructure

Caddy

The Ultimate Server with Automatic HTTPS

Filed 3 October 2026

An open source web server with automatic HTTPS, written in Go, featuring TLS certificate automation, reverse proxy capabilities, and PKI management.

Screenshot of the Caddy homepage — A look at caddyserver.com

Questions answered

How does Caddy automatically obtain TLS certificates?: By default, Caddy automatically obtains and renews TLS certificates for all your sites. With On-Demand TLS, Caddy obtains, renews, and maintains certificates on-the-fly during TLS handshakes, which is perfect for customer-owned domains in white-label SaaS applications.
What compliance requirements does Caddy meet?: Caddy's TLS defaults are secure and pass PCI, HIPAA, and NIST compliance requirements without requiring any additional configuration.
Can Caddy be extended with plugins?: Yes, Caddy can be extended by compile-time plugins which compile as native code. Nearly every part of the configuration that does something is pluggable, offering unlimited capabilities in a lean package. Plugins are written as Go packages and compile into the static binary.
How does Caddy handle multiple instances for certificate management?: Multiple Caddy instances configured with the same storage automatically coordinate certificate management as a fleet. They share resources such as keys and OCSP staples, and coordinate cluster operations automatically.

Billboard: paid placement

Notices in this column are paid for. They run in order of the total sum contributed and are kept apart from the vote record.

The Billboard in full Place a notice from $5

Key features

Automatic HTTPS and TLS certificate management
Reverse proxy with load balancing and health checks
Production-grade static file server
On-Demand TLS for white-label SaaS
RESTful JSON configuration API
Cluster coordination for certificate management
OCSP stapling with automatic caching
Internal PKI and self-signed certificates
Multiple configuration format support

Link metrics

Majestic link data for caddyserver.com. Arrows show the change since the previous check (up, down or no change).
Metric	Value	Change
Trust Flow	48	no change since last check
Citation Flow	57	no change since last check
Referring domains	24,354	no change since last check
External backlinks	1,345,404	no change since last check

Top topic: Society/Genealogy (41). Checked 3 Oct 2026, changed 3 Oct 2026. Link data by Majestic. Trust Flow, Citation Flow and Topical Trust Flow are trademarks of Majestic-12 Ltd.

Compare and explore

Reviews and discussion · Updates · Share · Is this your company? Claim it · Report this listing