Tools›SSL/TLS Scanner
networkMedium

SSL/TLS Scanner

SSL/TLS & Cipher Suite Analyzer

"Deep SSL/TLS inspection — certificates, cipher suites, protocol versions, and known weaknesses."

▶ Scan with SSL/TLS Scanner
Overview

TLS misconfigurations are among the most common and overlooked security issues. Expired certificates break user trust. Weak cipher suites allow decryption of traffic. Old protocol versions (SSLv3, TLS 1.0) have known vulnerabilities that make connections attackable.

SSL/TLS Scanner performs a comprehensive cryptographic assessment: it checks certificate validity and expiry, enumerates the full cipher suite list, identifies deprecated protocol versions, and checks for known weaknesses like BEAST, POODLE, HEARTBLEED, and ROBOT. With cipher enumeration enabled, it tests each cipher individually for compliance.

Scan options
OptionDescriptionEst. time
enumerate_ciphers ONDEFAULT
Test every cipher suite individually for full cipher inventory. Required for PCI-DSS compliance checks.
~60 sec/host
Example findings
CRITICALSSL Certificate Expired — 47 days ago
HIGHTLS 1.0 Supported — Protocol Downgrade Risk
HIGHRC4 Cipher Suite Accepted — Weak Encryption
MEDIUMCertificate Expires in 14 Days
What it discovers
  • ▸Expired or soon-to-expire SSL certificates
  • ▸Self-signed certificates
  • ▸Weak cipher suites (RC4, DES, 3DES, export-grade)
  • ▸Deprecated protocol versions (SSLv3, TLS 1.0, TLS 1.1)
  • ▸Missing HSTS header
  • ▸Certificate chain issues
  • ▸Weak key sizes (RSA < 2048 bits)
  • ▸Known protocol vulnerabilities (BEAST, POODLE, HEARTBLEED, ROBOT)