nabla-c0d3/sslyze

Health v2 · maintenance only

Adoption not part of the score

3775 stars · 493 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

SSLyze is a fast SSL/TLS scanning tool and Python library that analyzes a server's TLS configuration, including certificates, cipher suites, and vulnerability to known attacks like Heartbleed and ROBOT. It can be used as a CLI, a Python API, or a CI/CD step to check servers against Mozilla's recommended TLS configurations.

Use cases

• scan a server's SSL/TLS configuration for weak ciphers and certificates
• check if a server is vulnerable to Heartbleed or ROBOT
• verify TLS compliance against Mozilla's recommended configurations in CI/CD
• scan non-HTTP services like SMTP, IMAP, LDAP, or Postgres for TLS issues
• programmatically run TLS scans from Python or AWS Lambda
• export TLS scan results to JSON for later processing

When to choose

• you need fast, reliable TLS scanning of many servers at scale
• you want a Python API to embed TLS analysis into your own tooling
• you need to enforce TLS configuration compliance in a CI/CD pipeline
• you must scan TLS on non-HTTP protocols like SMTP, XMPP, or FTP

When to avoid

• you need full vulnerability scanning beyond TLS (e.g., web app vulnerabilities)
• you want a hosted scanning service with dashboards and reports
• your project cannot use AGPL-3.0 licensed dependencies
• you need to scan TLS of clients rather than servers

Facets

library · maturity stable

security vulnerability-scanning testing cli security developer-tools networking penetration-testing python windows cli ssl tls tls-scanning certificate-analysis heartbleed ssllabs cve-scanning python-library linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nabla-c0d3/sslyze")