SSLyze
Fast, programmatic TLS configuration analyzer.
KaliParrotLinuxlow
pkg: sslyze
SSLyze analyses TLS configuration and certificate validity and can enforce a policy for CI pipelines.
Syntax
sslyze {host}[:port]
Example
sslyze example.com
Runs a full TLS scan: protocols, ciphers, cert info, and common vulnerabilities.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
sslyze
Usage examples
sslyze target.tld
Full TLS scan.
sslyze --certinfo --json_out out.json target.tld
Cert analysis with JSON output.
Advantages
- Structured JSON output for automation
- Policy/Mozilla-config checking
- Reliable and fast
Disadvantages
- Python install footprint
- Less human-readable than testssl
- Focused on TLS only
Tags
#tls#ssl
Official docs: SSLyze ↗
Related commands
Frequently asked questions
What is SSLyze used for?
SSLyze analyses TLS configuration and certificate validity and can enforce a policy for CI pipelines.
What is an example SSLyze command?
A common example is: sslyze example.com — Runs a full TLS scan: protocols, ciphers, cert info, and common vulnerabilities.
Is SSLyze part of Kali Linux?
Yes. SSLyze ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install sslyze.
What category of security tool is SSLyze?
SSLyze is a Vulnerability Analysis tool with a low-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.