7.6 KiB
7.6 KiB
SSL/TLS & Web Security Tools
Online scanners, analyzers, configuration generators, Certificate Transparency resources, and related utilities for hardening web TLS/SSL.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|---|---|---|---|---|---|---|---|
| SSLLabs Server Test | https://www.ssllabs.com/ssltest/ | — | Deep analysis of public SSL/TLS server configuration and vulnerabilities. | ssl, tls, scanner, online, qualys, grading | — | 2011 | — |
| ImmuniWeb SSL Security Test | https://www.immuniweb.com/ssl | — | Tests SSL/TLS for PCI DSS, HIPAA, NIST compliance and post-quantum readiness. | ssl, tls, compliance, pci, hipaa, scanner | — | 2015 | — |
| SSL Check | https://www.jitbit.com/sslcheck/ | — | Scans websites for mixed/insecure content and common SSL configuration issues. | ssl, mixed-content, scanner, online | — | 2012 | — |
| SSL Scanner | https://www.sslshopper.com/ssl-checker.html | — | Validates SSL certificate chain, expiry dates, and basic misconfigurations. | ssl, certificate, checker, online | — | 2008 | — |
| CryptCheck | https://cryptcheck.fr/ | — | Evaluates TLS configuration, ciphers, protocols, and client handshake support. | tls, cipher, scanner, handshake, online | — | 2015 | — |
| Report URI | https://report-uri.com/ | — | Monitors CSP, HPKP, HSTS, and certificate transparency policy violations. | csp, hsts, monitoring, reporting | — | 2015 | — |
| CSP Evaluator | https://csp-evaluator.withgoogle.com/ | — | Analyzes and scores the effectiveness of Content Security Policies. | csp, security, policy, analyzer | — | 2018 | — |
| Useless CSP | https://github.com/0xInfection/Useless-CSP | 0xInfection/Useless-CSP | Collection exposing weak or useless CSP implementations on major websites. | csp, security, list, github | 2023-04-12 | 2020 | ~200 |
| Why No HTTPS? | https://www.whynohttps.com/ | — | Tracks top websites lacking automatic HTTP to HTTPS redirection. | https, adoption, tracking, list | — | 2018 | — |
| TLS Cipher Suite Search | https://ciphersuite.info/ | — | Searchable database of TLS cipher suites with security and support details. | cipher, tls, search, database | — | 2019 | — |
| cipherli.st | https://syslink.pl/cipherlist | — | Provides strong cipher suite configurations for Apache, Nginx, and Lighttpd. | cipher, config, tls, server | — | 2014 | — |
| dhtool | https://2ton.com.au/dhtool/ | — | Generates strong Diffie-Hellman parameters to improve forward secrecy. | dhparam, pfs, tls, generator | — | 2015 | — |
| badssl.com | https://badssl.com/ | — | Site with intentionally broken SSL/TLS setups for testing client behavior. | tls, testing, badssl, client | — | 2015 | — |
| tlsfun.de | https://tlsfun.de/ | — | Collection of live demos and tests for various TLS/SSL protocol edge cases. | tls, demo, testing, protocol | — | 2016 | — |
| CAA Record Helper | https://sslmate.com/caa/ | — | Generates proper Certificate Authority Authorization (CAA) DNS records. | caa, dns, generator, certificate | — | 2017 | — |
| Common CA Database (CCADB) | https://ccadb.my.salesforce-sites.com/ | — | Repository of Certificate Authority information, roots, and intermediates. | ca, certificate, database, root | — | 2017 | — |
| CERTSTREAM | https://certstream.calidog.io/ | Calidog/certstream | Real-time streaming service for Certificate Transparency log updates. | ct, transparency, stream, real-time | 2025-11-20 | 2018 | ~400 |
| crt.sh | https://crt.sh/ | — | Search engine for certificates logged in public Certificate Transparency logs. | ct, transparency, search, certificate | — | 2015 | — |
| Hardenize | https://www.hardenize.com/ | — | Comprehensive security testing including TLS, email, headers, DNS, and CT logs. | hardening, scanner, tls, multi-protocol | — | 2018 | — |
| Cipher suite compatibility | https://www.ssllabs.com/ssltest/viewMyClient.html | — | Tests TLS cipher and protocol compatibility from your current browser/client. | tls, compatibility, client, browser | — | 2011 | — |
| security.txt | https://securitytxt.org/ | — | Standard and generator for security contact/policy disclosure on websites. | securitytxt, policy, contact, standard | — | 2017 | — |
| Mozilla SSL Config Generator | https://ssl-config.mozilla.org/ | — | Generates secure TLS configurations following Mozilla guidelines for servers. | tls, config, generator, mozilla, server | — | 2016 | — |
| TLScan | https://github.com/prbinu/tlscan | prbinu/tlscan | Pure Python tool to scan and enumerate SSL/TLS protocols and cipher suites. | tls, scanner, python, enumerator | 2022-08-15 | 2019 | ~50 |