Alternatives to SSL Labs Server Test
A Qualys web service that analyses the TLS/SSL configuration of a public web server. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
SSL Labs Server Test
A Qualys web service that analyses the TLS/SSL configuration of a public web server.
Replacements
Listings that take over the same core job as SSL Labs Server Test.
ImmuniWeb SSL Security Test
A free online test of the SSL/TLS setup of a web or email server.
ImmuniWeb SSL Security Test also audits TLS for free, adding email server tests, PCI DSS, HIPAA and NIST compliance checks and PDF export.
Hardenize
A web site configuration tester and monitoring service for network, certificate and security settings.
Hardenize covers TLS within a broader network and security configuration report and adds certificate monitoring for organisations.
CryptCheck
A web tool that checks the TLS configuration of HTTPS, SMTP and XMPP servers.
CryptCheck checks TLS on HTTPS, SMTP and XMPP servers with detailed protocol and cipher output, though its interface is in French.
CDN77 TLS Test
A free web checker from CDN77 that lists the SSL and TLS versions a server supports.
CDN77 TLS Test quickly lists enabled SSL and TLS versions and highlights deprecated ones, with less detail than a full audit and CDN promotion.
GF.dev TLS Cipher Suite Scanner
A free web tool that reports the TLS version and cipher suite a server negotiates.
GF.dev TLS Cipher Suite Scanner is a quicker check that reports only the negotiated TLS version and cipher suite, not the full supported list.
testssl.sh
A free command-line tool that checks a server's TLS/SSL ciphers, protocols and cryptographic flaws.
testssl.sh is a GPL-2.0 command-line Bash script that tests any port, including non-public servers you can reach, but its output needs some TLS knowledge.
SSLyze
Open-source command-line scanner and Python library that analyzes a server's SSL/TLS configuration.
SSLyze is an open-source command-line scanner and Python library with JSON output for automation, trading the web interface and letter grade for scripting.
Internet.nl
A web test that checks websites, mail domains and connections for modern Internet standards support.
Internet.nl checks TLS as part of wider standards tests such as IPv6, DNSSEC and DMARC, and can be self-hosted with Docker.
Also worth comparing
These listings name SSL Labs Server Test as their own alternative, so the relationship runs both ways.
Check Your Website
Free online checker for a domain's DNS, redirects, certificates, connections and mixed content.
SSL Labs Server Test audits protocols, ciphers and vulnerabilities in more depth, but does not cover DNS, redirects or mixed content.
Decoder.link SSL Checker
An online SSL checker that validates a server's certificate installation, with SNI and STARTTLS support.
SSL Labs Server Test runs a full protocol, cipher and vulnerability audit with a letter grade, though a full test takes a while and covers public web servers.
DigiCert SSL Installation Checker
A DigiCert web tool that diagnoses TLS/SSL certificate installation problems on a server.
SSL Labs Server Test gives a full protocol and cipher audit with a letter grade rather than only diagnosing certificate installation.
SSL Shopper SSL Checker
An online checker that verifies a server's SSL certificate installation, chain, hostname and expiry.
SSL Labs Server Test gives a thorough protocol, cipher and vulnerability audit with a letter grade, but a full test takes a while to run.
Similar software
Related functionality, not a direct replacement.
Security Headers
A web service that analyses a site's HTTP response headers and grades them from A+ to F.
CAA Test
A web tool that checks the DNS CAA records published for a domain.
HSTS Preload List Submission
A web tool to check a domain's HSTS preload status and submit it for inclusion.
HTTP Observatory
Mozilla's web tool that grades a site's HTTP security headers and gives fix recommendations.
