Assessment Tools

This page contains links to available SSL assessment tools.

Server assessment

• Cipherscan (cli-tool)
• Comodo SSL Analyzer
• GlobalSign SSL Check implemented using the SSL Labs API.
• OpenSSL comes with a command-line tool (s_client) that can be used for assessment purposes. This tool requires a great deal of knowledge, but it is often the most reliable way to perform troubleshooting.
• O-Saft
• SSL Labs provides comprehensive SSL/TLS and PKI assessment of any publicly available SSL server.
• SSLScan
• SSLScan Windows Port
• SSLyze
• ssl-cipher-suite-enum
• SSL Audit
• TestSSLServer
• testssl.sh (cli-tool)
• TLSSLed
• Raymii's SSL tester
• DigiCert Certificate Checker (online checker)
• DigiCert Certificate Inspector (local agent, GUI and CLI)
• DigiCert Certificate Utility
• tls-scan (cli-tool)

Client assessment

• DCSEC Research Group at Leibniz University Hannover - does not correctly identify the best supported protocol and some cipher suites.
• How's My SSL?
• Janusz Dziemidowicz's TLS client information
• Mike's Toolbox
• suche.org Client Test (incl TLSv1.3 Information)
• SSL Labs Client Test
• Badssl Client Test