Analyze your SSL certificates and server configuration. Detect weak ciphers, expired certs, and vulnerabilities like Heartbleed or POODLE.
We perform a handshake with your server using various protocols to map out its security posture.
We validate the entire trust chain, ensuring the root CA is trusted and intermediate certificates are correctly installed.
We test for support of old, insecure protocols like SSLv3, TLS 1.0, and TLS 1.1, which should be disabled.
We enumerate all supported cipher suites to find weak encryption algorithms (RC4, DES) that could be cracked.
Tests for specific SSL vulnerabilities like Heartbleed, ROBOT, POODLE, and FREAK.
Shows clearly when your certificate expires and who issued it (Let's Encrypt, DigiCert, etc.).
Verifies HSTS headers, OCSP stapling, and Perfect Forward Secrecy (PFS) support.