Alternatives to GF.dev TLS Cipher Suite Scanner

A free web tool that reports the TLS version and cipher suite a server negotiates. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as GF.dev TLS Cipher Suite Scanner.

  • SSL Labs Server Test

    A Qualys web service that analyses the TLS/SSL configuration of a public web server.

    FreeProprietaryWeb

    SSL Labs Server Test gives a detailed audit of protocols, ciphers and vulnerabilities with a letter grade instead of only the negotiated suite, though a full test takes a while.

  • ImmuniWeb SSL Security Test

    A free online test of the SSL/TLS setup of a web or email server.

    FreeProprietaryWeb

    ImmuniWeb SSL Security Test also covers email servers and adds PCI DSS, HIPAA and NIST compliance checks, post-quantum readiness and PDF report export.

  • CryptCheck

    A web tool that checks the TLS configuration of HTTPS, SMTP and XMPP servers.

    FreeProprietaryWeb

    CryptCheck gives detailed protocol and cipher information for HTTPS, SMTP and XMPP servers, but its interface is in French with little documentation.

  • CDN77 TLS Test

    A free web checker from CDN77 that lists the SSL and TLS versions a server supports.

    FreeProprietaryWeb

    CDN77 TLS Test lists every enabled SSL and TLS version and highlights deprecated ones in red, but shows less detail than dedicated audit tools and carries CDN promotion.

  • Hardenize

    A web site configuration tester and monitoring service for network, certificate and security settings.

    FreemiumProprietaryWeb

    Hardenize gives a free public configuration report covering network, certificate and security settings, and adds continuous monitoring aimed at organisations with little public pricing detail.

  • Internet.nl

    A web test that checks websites, mail domains and connections for modern Internet standards support.

    FreeProprietaryWebSelf-hosted

    Internet.nl checks TLS as part of a wider test of IPv6, DNSSEC, DMARC, DANE and RPKI support, and can also be run yourself from a Docker package.

  • testssl.sh

    A free command-line tool that checks a server's TLS/SSL ciphers, protocols and cryptographic flaws.

    FreeOpen sourcemacOSLinuxCommand line

    testssl.sh is a GPL-2.0 command-line script that tests any port for protocols, ciphers and flaws, but output needs TLS knowledge.

  • SSLyze

    Open-source command-line scanner and Python library that analyzes a server's SSL/TLS configuration.

    FreeOpen sourceCommand line

    SSLyze is an open-source command-line scanner and Python library with JSON output for automation, and has no graphical interface.

Similar software

Related functionality, not a direct replacement.