Online TLS Scanner

Scans a host's TLS configuration — supported protocol versions, cipher suites, and known weaknesses — rather than just checking whether HTTPS works at all. A site can serve a perfectly valid, unexpired certificate while still supporting deprecated protocols like TLS 1.0/1.1 or weak cipher suites that fail a security audit or PCI compliance scan. Particularly useful after a server migration or OpenSSL upgrade, where cipher suite defaults can shift without anyone explicitly changing them.

This scan reports negotiable protocols and ciphers regardless of whether the certificate itself is trusted or self-signed — a locally-trusted internal cert can show a fully modern, secure configuration here even though a public browser would reject it for an unrelated reason.

📖 Read more in our Knowledge Base →