What it does
SSLyze is a TLS scanning tool and Python library that inspects certificates, cipher support and server configuration, with JSON output and CI integration.
Pass the reachable service endpoints to SSLyze and save JSON when another system needs the findings. The project supports Windows, Linux and macOS routes, a Python API and non-HTTP services such as mail, LDAP, RDP, PostgreSQL and FTP. By default it compares results with Mozilla’s intermediate TLS configuration and returns a nonzero status on noncompliance. Choose old, intermediate, modern or a custom JSON configuration to match the clients the service must support; a modern-profile failure can reflect an intentional compatibility choice. Retain the scanner version and target/protocol with the result. The project is AGPL-licensed.
Strengths
- JSON results and CI exit status
- Supports several non-HTTP services
Watch out for
- A compliance profile must match the intended service requirements