security enabled verified low v1.0.0

sslyze

Python-based SSL/TLS scanner that analyzes server configurations for protocol support, cipher strength, certificate validation, and known vulnerabilities.

📋 Live Preview

sslyze {flag-regular} {flag-certinfo} {flag-sslv2} {flag-sslv3} {flag-tlsv1} {flag-tlsv11} {flag-tlsv12} {flag-tlsv13} {flag-starttls} {flag-json} {target}:{port}

📎 flag-regular 📎 flag-certinfo 📎 flag-sslv2 📎 flag-sslv3 📎 flag-tlsv1 📎 flag-tlsv11 📎 flag-tlsv12 📎 flag-tlsv13 📎 flag-starttls 📎 flag-json 📎 target 📎 port

sslyze {flag-regular} {flag-certinfo} {flag-sslv2} {flag-sslv3} {flag-tlsv1} {flag-tlsv11} {flag-tlsv12} {flag-tlsv13} {flag-starttls} {flag-json} {target}:{port}

Sandbox: execFile · Timeout: 120s

Capabilities

tls.scan.certificate

tls.scan.cipher

tls.scan.protocol

tls.scan.vulnerability

Parameters

Name	Type	Required	Default	Description	Aliases
`target`	string	Yes	-	Target hostname or IP:port	-
`flag-json`	boolean	No	-	Output in JSON format	`--json_out`
`flag-regular`	boolean	No	-	Run regular scan (all cipher suites)	`--regular`
`flag-certinfo`	boolean	No	-	Retrieve certificate information	`--certinfo`
`flag-sslv2`	boolean	No	-	Check SSLv2 support	`--sslv2`
`flag-sslv3`	boolean	No	-	Check SSLv3 support	`--sslv3`
`flag-tlsv1`	boolean	No	-	Check TLSv1.0 support	`--tlsv1`
`flag-tlsv11`	boolean	No	-	Check TLSv1.1 support	`--tlsv1_1`
`flag-tlsv12`	boolean	No	-	Check TLSv1.2 support	`--tlsv1_2`
`flag-tlsv13`	boolean	No	-	Check TLSv1.3 support	`--tlsv1_3`
`flag-starttls`	string	No	-	STARTTLS protocol (smtp, ftp, xmpp, etc.)	`--starttls`
`flag-timeout`	integer	No	-	Connection timeout in seconds	`--timeout`

Artifacts

Type	Description	MIME	Schema	Trust
`report.json`	TLS scan results as JSON	application/json	-	verified
`report.txt`	TLS scan results as text	text/plain	-	verified

Contract

Inputs

network.target.host

Target hostname or IP address

network.port

Target port (default 443)

Outputs

report.json

Scan results in JSON

report.txt

Scan results in text

Side effects: network_traffic

Workflow Edges

Produces

report.jsonreport.txt

Consumes

network.target.hostnetwork.port

Resource Profile

Resource	Value
CPU	low
Memory	128 MB
Network	low
Disk I/O	low

Examples

Basic TLS scan on default port

sslyze example.com

Scan specific port with JSON output

sslyze --json_out results.json example.com:8443

Full scan with certificate info

sslyze --regular --certinfo example.com

Check STARTTLS for SMTP

sslyze --starttls smtp example.com:25

Documentation

sslyze — SSL/TLS Scanner

sslyze is a fast and comprehensive Python-based TLS/SSL scanner that analyzes server configurations. It checks protocol support (SSLv2, SSLv3, TLS 1.0-1.3), cipher suite strength, certificate validity, and known vulnerabilities like Heartbleed, ROBOT, and others.

Usage

# Basic scan
sslyze example.com

# Full scan with JSON output
sslyze --regular --certinfo --json_out scan.json example.com

# Check STARTTLS on SMTP
sslyze --starttls smtp mail.example.com:25

# Check specific TLS version
sslyze --tlsv1_2 --tlsv1_3 example.com