# nabla-c0d3/sslyze

Fast and powerful SSL/TLS scanning library.

Repository: https://github.com/nabla-c0d3/sslyze
Canonical: https://ross.abutalabs.com/products/sslyze
Language: Python
License: AGPL-3.0
License Family: copyleft
Topics: python, ssl, scans, ssllabs, library, tls, security, tls13, sslyze, tls-scanning-library, heartbleed
Last push: 2026-08-23T19:34:50+00:00

## Health v2 (maintenance only)
Score: 83/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 53, longevity 100
- inputs: {"age_days": 4398, "days_push": 10, "days_rel": 157, "gap_med": 148, "n_releases_24m": 4}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3775, forks 493 (observed 2026-08-28T04:08:18.252196+00:00)

## What it is
SSLyze is a fast SSL/TLS scanning tool and Python library that analyzes a server's TLS configuration, including certificates, cipher suites, and vulnerability to known attacks like Heartbleed and ROBOT. It can be used as a CLI, a Python API, or a CI/CD step to check servers against Mozilla's recommended TLS configurations.

## Use cases
- scan a server's SSL/TLS configuration for weak ciphers and certificates
- check if a server is vulnerable to Heartbleed or ROBOT
- verify TLS compliance against Mozilla's recommended configurations in CI/CD
- scan non-HTTP services like SMTP, IMAP, LDAP, or Postgres for TLS issues
- programmatically run TLS scans from Python or AWS Lambda
- export TLS scan results to JSON for later processing

## When to choose
- you need fast, reliable TLS scanning of many servers at scale
- you want a Python API to embed TLS analysis into your own tooling
- you need to enforce TLS configuration compliance in a CI/CD pipeline
- you must scan TLS on non-HTTP protocols like SMTP, XMPP, or FTP

## When to avoid
- you need full vulnerability scanning beyond TLS (e.g., web app vulnerabilities)
- you want a hosted scanning service with dashboards and reports
- your project cannot use AGPL-3.0 licensed dependencies
- you need to scan TLS of clients rather than servers

## Facets
- artifact type: library
- maturity: stable
- function: security, vulnerability-scanning, testing, cli
- domain: security, developer-tools, networking, penetration-testing
- platform: python, windows, cli
- tags: ssl, tls, tls-scanning, certificate-analysis, heartbleed, ssllabs, cve-scanning, python-library, linux, macos, docker

## Member repositories
- nabla-c0d3/sslyze (main) score 83

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:18.252196+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:27:50.242723+00:00, confidence not recorded.
  - readme: https://github.com/nabla-c0d3/sslyze (fetched 2026-08-28T04:08:18.252196+00:00, sha 9e615c8082a8)
  - registry_pypi: https://pypi.org/pypi/sslyze/json (fetched 2026-08-29T09:22:33.802264+00:00, sha a8baeb30e899)
- Data as of 2026-08-30T08:39:29.467469+00:00.