SSLyze

Fast, programmatic TLS configuration analyzer.

KaliParrotLinuxlow

pkg: sslyze

SSLyze analyses TLS configuration and certificate validity and can enforce a policy for CI pipelines.

Syntax

sslyze {host}[:port]

Example

sslyze example.com

Runs a full TLS scan: protocols, ciphers, cert info, and common vulnerabilities.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

--certinfo <value>Analyse the certificate.
--tlsv1_2Test for TLS 1.2 support.
--heartbleedTest for Heartbleed.
--json_out <out.json>Write JSON results.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

sslyze

Usage examples

sslyze target.tld

Full TLS scan.

sslyze --certinfo --json_out out.json target.tld

Cert analysis with JSON output.

Advantages
  • Structured JSON output for automation
  • Policy/Mozilla-config checking
  • Reliable and fast
Disadvantages
  • Python install footprint
  • Less human-readable than testssl
  • Focused on TLS only
Tags
#tls#ssl

Official docs: SSLyze

Related commands

Frequently asked questions

What is SSLyze used for?
SSLyze analyses TLS configuration and certificate validity and can enforce a policy for CI pipelines.
What is an example SSLyze command?
A common example is: sslyze example.com — Runs a full TLS scan: protocols, ciphers, cert info, and common vulnerabilities.
Is SSLyze part of Kali Linux?
Yes. SSLyze ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install sslyze.
What category of security tool is SSLyze?
SSLyze is a Vulnerability Analysis tool with a low-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →