# SSL/TLS & Web Security Tools

Online scanners, analyzers, configuration generators, Certificate Transparency resources, and related utilities for hardening web TLS/SSL.

| Name                          | Vendor/Webpage                                      | GitHub Repo                              | Brief Description                                                                 | Tags                                      | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
| SSLLabs Server Test          | https://www.ssllabs.com/ssltest/                   | —                                        | Deep analysis of public SSL/TLS server configuration and vulnerabilities.         | ssl, tls, scanner, online, qualys, grading| —             | 2011          | —     |
| ImmuniWeb SSL Security Test  | https://www.immuniweb.com/ssl                      | —                                        | Tests SSL/TLS for PCI DSS, HIPAA, NIST compliance and post-quantum readiness.     | ssl, tls, compliance, pci, hipaa, scanner | —             | 2015          | —     |
| SSL Check                    | https://www.jitbit.com/sslcheck/                   | —                                        | Scans websites for mixed/insecure content and common SSL configuration issues.    | ssl, mixed-content, scanner, online       | —             | 2012          | —     |
| SSL Scanner                  | https://www.sslshopper.com/ssl-checker.html        | —                                        | Validates SSL certificate chain, expiry dates, and basic misconfigurations.      | ssl, certificate, checker, online         | —             | 2008          | —     |
| CryptCheck                   | https://cryptcheck.fr/                             | —                                        | Evaluates TLS configuration, ciphers, protocols, and client handshake support.    | tls, cipher, scanner, handshake, online   | —             | 2015          | —     |
| Report URI                   | https://report-uri.com/                            | —                                        | Monitors CSP, HPKP, HSTS, and certificate transparency policy violations.         | csp, hsts, monitoring, reporting          | —             | 2015          | —     |
| CSP Evaluator                | https://csp-evaluator.withgoogle.com/              | —                                        | Analyzes and scores the effectiveness of Content Security Policies.               | csp, security, policy, analyzer           | —             | 2018          | —     |
| Useless CSP                  | https://github.com/0xInfection/Useless-CSP         | [0xInfection/Useless-CSP](https://github.com/0xInfection/Useless-CSP) | Collection exposing weak or useless CSP implementations on major websites.       | csp, security, list, github               | 2023-04-12    | 2020          | ~200  |
| Why No HTTPS?                | https://www.whynohttps.com/                        | —                                        | Tracks top websites lacking automatic HTTP to HTTPS redirection.                  | https, adoption, tracking, list           | —             | 2018          | —     |
| TLS Cipher Suite Search      | https://ciphersuite.info/                          | —                                        | Searchable database of TLS cipher suites with security and support details.       | cipher, tls, search, database             | —             | 2019          | —     |
| cipherli.st                  | https://syslink.pl/cipherlist                      | —                                        | Provides strong cipher suite configurations for Apache, Nginx, and Lighttpd.      | cipher, config, tls, server               | —             | 2014          | —     |
| dhtool                       | https://2ton.com.au/dhtool/                        | —                                        | Generates strong Diffie-Hellman parameters to improve forward secrecy.            | dhparam, pfs, tls, generator              | —             | 2015          | —     |
| badssl.com                   | https://badssl.com/                                | —                                        | Site with intentionally broken SSL/TLS setups for testing client behavior.        | tls, testing, badssl, client              | —             | 2015          | —     |
| tlsfun.de                    | https://tlsfun.de/                                 | —                                        | Collection of live demos and tests for various TLS/SSL protocol edge cases.       | tls, demo, testing, protocol              | —             | 2016          | —     |
| CAA Record Helper            | https://sslmate.com/caa/                           | —                                        | Generates proper Certificate Authority Authorization (CAA) DNS records.           | caa, dns, generator, certificate          | —             | 2017          | —     |
| Common CA Database (CCADB)   | https://ccadb.my.salesforce-sites.com/             | —                                        | Repository of Certificate Authority information, roots, and intermediates.        | ca, certificate, database, root           | —             | 2017          | —     |
| CERTSTREAM                   | https://certstream.calidog.io/                     | [Calidog/certstream](https://github.com/CaliDog/certstream) | Real-time streaming service for Certificate Transparency log updates.             | ct, transparency, stream, real-time       | 2025-11-20    | 2018          | ~400  |
| crt.sh                       | https://crt.sh/                                    | —                                        | Search engine for certificates logged in public Certificate Transparency logs.   | ct, transparency, search, certificate     | —             | 2015          | —     |
| Hardenize                    | https://www.hardenize.com/                         | —                                        | Comprehensive security testing including TLS, email, headers, DNS, and CT logs.   | hardening, scanner, tls, multi-protocol   | —             | 2018          | —     |
| Cipher suite compatibility   | https://www.ssllabs.com/ssltest/viewMyClient.html  | —                                        | Tests TLS cipher and protocol compatibility from your current browser/client.     | tls, compatibility, client, browser       | —             | 2011          | —     |
| security.txt                 | https://securitytxt.org/                           | —                                        | Standard and generator for security contact/policy disclosure on websites.        | securitytxt, policy, contact, standard    | —             | 2017          | —     |
| Mozilla SSL Config Generator | https://ssl-config.mozilla.org/                    | —                                        | Generates secure TLS configurations following Mozilla guidelines for servers.     | tls, config, generator, mozilla, server   | —             | 2016          | —     |
| TLScan                       | https://github.com/prbinu/tlscan                   | [prbinu/tlscan](https://github.com/prbinu/tlscan) | Pure Python tool to scan and enumerate SSL/TLS protocols and cipher suites.       | tls, scanner, python, enumerator          | 2022-08-15    | 2019          | ~50   |