ENNAENNA

SSLyze vs testssl.sh

GitHub Stats

3.7k
Stars
9.0k
494
Forks
1.1k
19
Issues
251
22d ago
Updated
3d ago
AGPL-3.0
License
GPL-2.0
Python
Language
Shell

About SSLyze

SSLyze is a fast and powerful Python library and command-line tool for analyzing the TLS/SSL configuration of servers to identify misconfigurations, weak cipher suites, and protocol vulnerabilities. It tests for issues including Heartbleed, certificate chain problems, support for deprecated protocols like SSLv3 and TLS 1.0, and compliance with security standards. Security auditors, DevOps engineers, and compliance teams use SSLyze to validate that their TLS deployments meet organizational policies and industry requirements such as PCI DSS. Its Python API makes it easy to integrate into CI/CD pipelines and automated security scanning workflows, enabling continuous monitoring of TLS configurations across large server fleets.

About testssl.sh

testssl.sh is a command-line tool that evaluates the security of TLS/SSL configurations on any given port. It checks for supported ciphers, protocols, and potential cryptographic flaws, including vulnerabilities like Heartbleed. Written in Shell, testssl.sh is a versatile tool for assessing the security of SSL/TLS implementations, widely used by administrators and security professionals to ensure secure communication channels.

Platform Support

๐Ÿงlinux๐ŸŽmacos๐ŸชŸwindows
๐Ÿงlinux๐ŸŽmacos

Tags

Shared

tlsssl

SSLyze only

scannerconfiguration

testssl.sh only

cipher-checkheartbleed