Overview
The SSL/TLS Scanner analyzes the security configuration of SSL/TLS services, identifying weak ciphers, deprecated protocols, certificate issues, and known vulnerabilities like Heartbleed, POODLE, and ROBOT. The SSL/TLS Scanner is a vulnerability scanner: it actively tests SSL/TLS configurations for security weaknesses. It does not add data to your Attack Surface. Identified vulnerabilities are reported as findings.Supported targets
Scan types
Parameters comparison
Engines comparison
The Deep scan tests ~5,003 ports and may take significant time. Use Light mode for quick HTTPS checks or Custom mode to specify exact ports.
Custom scan
Full control over scan parameters:- Select specific scanning engines (Certificate, Vulnerability, or both)
- Define custom port ranges, lists, or common port presets
- Target specific SSL/TLS services on non-standard ports
Custom scan options
Port selection
See Port lists for the exact ports covered by each preset.
Vulnerability checks
The Vulnerability engine detects these known SSL/TLS vulnerabilities:Certificate checks
The Certificate engine analyzes certificate configuration:Protocol analysis
Cipher suite analysis
How it works
The SSL/TLS Scanner uses a scanning engine based on testssl.sh with custom enhancements:- Port discovery: Uses Nmap to identify SSL/TLS-enabled services on specified ports
- Protocol negotiation: Attempts to negotiate various SSL/TLS protocol versions
- Cipher enumeration: Tests which cipher suites the server accepts
- Vulnerability testing: Runs specific checks for known SSL/TLS vulnerabilities
- Certificate analysis: Validates the certificate chain and configuration
Follow-up actions
After identifying SSL/TLS issues:- Update server configuration: Disable weak protocols and ciphers
- Renew certificates: Replace expiring or weak certificates
- Run Network Scanner: Test for additional infrastructure vulnerabilities
- Check Website Scanner: Assess web application security