Works with
HexSign works with Capawesome Cloud
Capawesome Cloud is where a lot of Capacitor teams are landing now that Ionic Appflow is being sunset on 31 December 2027, and Capawesome positions itself as an officially recommended alternative for Capacitor apps. It does over-the-air Live Updates, Native Builds on M4 hardware, App Store Publishing behind one encrypted vault for API keys, service accounts and passwords, and Automations to chain the three together. Its managed code signing takes the .p12 and .mobileprovision files you give it and applies them to the right targets at build time. HexSign is the layer before that: it is where those files come from, and it is the thing that reissues them before Apple's one-year clock runs out.
TL;DR
- These are different jobs. Capawesome Cloud builds, signs and ships Capacitor, Ionic and Cordova apps. HexSign owns the Apple certificates and provisioning profiles that go into it.
- Capawesome's signing setup is an upload: a .p12 with its password, plus the .mobileprovision files for the app and any extensions. Its docs are straightforward that expired profiles show up as failed builds and you regenerate and re-upload them yourself.
- Capawesome documents no scheduled renewal and no certificate or profile expiry notifications. HexSign reissues certificates and rebuilds profiles on a daily job 30 days out and alerts email, Slack, Microsoft Teams, Jira, PagerDuty or incident.io when a renewal needs a person.
- The handoff is scriptable at both ends. HexSign's CLI downloads the current certificate and profile; Capawesome's CLI has apps:certificates create and update for pushing them back in.
- Capawesome is Capacitor, Ionic and Cordova only, and its builds are iOS and Android. A native iOS project, a Developer ID build of a Mac app, or a second Apple team sits outside that scope and inside HexSign's.
By Ash Dan, Founder, HexSign · Last reviewed
Where teams hit friction
Common pain points with Capawesome Cloud
Why teams pick HexSign
What HexSign adds on top of Capawesome Cloud
Live relationship graph
An interactive graph linking certificates, provisioning profiles, bundle IDs, and devices. Click any node to see its dependencies and the blast radius of revoking or rotating it.
Expiration alerts before things break
Alerts to email, Slack, Microsoft Teams, Jira, PagerDuty, Jira Service Management, or incident.io at thresholds you choose (7, 14, 30, 60, 90 days). Send a test alert before enabling delivery, so there are no surprise expirations during a release.
Health score & expiring items
A 0-100% health score across every Apple account you connect, plus an expiring-items panel that surfaces what to act on first. No CLI invocation required.
Guided provisioning profile wizard
A step-by-step wizard picks the right profile type, identifier, signing certificate, and devices, then generates the profile through Apple's API. No portal tab-switching.
Multi-account dashboard
Connect one or many Apple Developer team accounts. Each syncs independently with its own status and error reporting, all visible from a single dashboard.
Audit logs, RBAC & MFA
Owner / Admin / Member roles, per-user auth activity log, and MFA via SMS or TOTP authenticator apps. Every certificate, profile, device, and identifier change is logged.
Side-by-side
HexSign vs Capawesome Cloud, feature by feature
HexSign | Capawesome Cloud | |
|---|---|---|
| Approach | ||
| Primary purpose | Apple Developer asset dashboard | Live updates, native builds and store publishing |
| App types covered | Any iOS or macOS target | Capacitor, Ionic and Cordova apps |
| Build targets | iOS and Android | |
| Standalone of CI | Signing is consumed by Capawesome builds | |
| Setup | Add an ASC API key | Upload a .p12 and .mobileprovision files |
| Asset Management | ||
| Central store for certs & profiles | Yes (signing certificates page) | |
| Certificate generation | Yes, through Apple's API | Separate online certificate generator tool |
| CSR generation with KMS-encrypted private key | Not documented | |
| Certificate revocation | Yes, from the dashboard | Apple Developer Portal |
| Profile creation | Yes, via wizard | Upload from the Apple Developer Portal |
| Multiple profiles for app extensions | Yes, matched by bundle identifier | |
| Android keystore storage | ||
| Store credential vault (ASC key, Play service account) | ||
| Bundle ID & capability management | Via Apple Developer Portal | |
| Renewal & Lifecycle | ||
| Scheduled auto-renewal before expiry | Yes, daily job at 30 days out | Not documented |
| Profile rebuild after cert rotation | Automatic in the same run | Regenerate and re-upload by hand |
| Rotation against a stored CSR | Not documented | |
| How expiry is discovered | Alert at a threshold you pick | A failed build |
| Visibility & Monitoring | ||
| Relationship graph | ||
| Health score dashboard | ||
| Expiring-items panel | ||
| Multi-account dashboard | Yes, many Apple teams | Per-app signing certificates |
| Alerts | ||
| Cert/profile expiration alerts (email) | Yes, custom thresholds | Not documented |
| Slack alerts for expiry | Not documented | |
| Microsoft Teams alerts for expiry | Not documented | |
| PagerDuty / incident.io alerts | Not documented | |
| Build and deployment webhooks | ||
| Team & Security | ||
| Role-based access control | Owner / Admin / Member | Organisation owners, admins and members |
| Multi-factor authentication | TOTP / SMS | Yes, two-factor authentication |
| Audit logs | Certificates, profiles, devices, identifiers | Apps, bundles, channels, members, organisations |
| SSO | Available on higher plans | Business plan and above |
| Pricing | ||
| Free tier | Free plan for open source, on application | |
| Free trial | 14 days | 14 days |
| Published prices | Yes, $19 / $49 / $149 / $499 per month | |
| Enterprise plan | Custom | |
FAQ
Questions about HexSign vs Capawesome Cloud
Other comparisons
Beyond Capawesome Cloud: more HexSign comparisons
Open-source CLI
HexSign vs Fastlane Match
Read HexSign vs Fastlane MatchApple's first-party portal
HexSign vs Apple Developer Portal
Read HexSign vs Apple Developer PortalCI/CD with managed signing
HexSign vs Codemagic
Read HexSign vs CodemagicMobile DevOps platform
HexSign vs Bitrise
Read HexSign vs BitriseApple's managed CI/CD with automatic signing
HexSign vs Xcode Cloud
Read HexSign vs Xcode CloudEnterprise mobile CI/CD
HexSign vs Appcircle
Read HexSign vs AppcircleManaged credentials for Expo
HexSign vs Expo EAS
Read HexSign vs Expo EASSee HexSign in your stack: code signing for iOS Native (Swift), code signing for Flutter, code signing for React Native, code signing for Electron, and code signing for vibe coding.