testssl/testssl.sh

Health v2 · maintenance only

Adoption not part of the score

9181 stars · 1143 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

testssl.sh is a free, bash-based command line tool that checks any server's service on any port for TLS/SSL cipher, protocol, and cryptographic flaw support. It requires no installation or dependencies, works across Linux, macOS, BSD, and WSL2/Cygwin, and outputs human-readable plus machine-readable (CSV, JSON, HTML) results.

Use cases

• audit a web server's TLS/SSL configuration for weak ciphers and protocols
• check for cryptographic flaws like Bleichenbacher on any STARTTLS service
• scan TLS on non-standard ports, not just 443
• generate machine-readable JSON/CSV reports of SSL scan results for CI pipelines
• test servers for post-quantum key exchange and QUIC support
• quickly check TLS config from a pentest box without installing dependencies

When to choose

• you need a zero-install, single-script TLS scanner that runs anywhere bash runs
• you want clear pass/fail output plus JSON/CSV for automation
• you need to test STARTTLS services (SMTP, IMAP, etc.) or arbitrary ports
• you want thorough, well-maintained checks of protocols, ciphers, and flaws

When to avoid

• you need a full web application vulnerability scanner rather than TLS-specific testing
• you want a GUI or continuous certificate monitoring service
• your environment has no bash or POSIX shell available

Facets

cli-tool · maturity active

security vulnerability-scanning cli testing security developer-tools networking windows bsd cli cross-platform tls ssl openssl pentesting cipher-scanning quic post-quantum shell-script csv-output json-output client-simulation command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="testssl/testssl.sh")