Alternatives to SSLyze
Open-source command-line scanner and Python library that analyzes a server's SSL/TLS configuration. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
SSLyze
Open-source command-line scanner and Python library that analyzes a server's SSL/TLS configuration.
Replacements
Listings that take over the same core job as SSLyze.
testssl.sh
A free command-line tool that checks a server's TLS/SSL ciphers, protocols and cryptographic flaws.
testssl.sh is a GPL-2.0 Bash script for macOS and Linux that tests any port and known cryptographic flaws, with few dependencies but no Python library use.
SSL Labs Server Test
A Qualys web service that analyses the TLS/SSL configuration of a public web server.
SSL Labs Server Test is a free Qualys web service with an easy-to-compare letter grade, but it only tests public servers and has no command-line or JSON workflow.
ImmuniWeb SSL Security Test
A free online test of the SSL/TLS setup of a web or email server.
ImmuniWeb SSL Security Test is a free web tool that adds compliance checks, post-quantum readiness and PDF reports, but only for internet-reachable servers.
CryptCheck
A web tool that checks the TLS configuration of HTTPS, SMTP and XMPP servers.
CryptCheck is a web tool checking TLS on HTTPS, SMTP and XMPP servers with nothing to install, though its interface is in French.
Hardenize
A web site configuration tester and monitoring service for network, certificate and security settings.
Hardenize is a hosted freemium service with a public configuration report and ongoing certificate monitoring, replacing local scanning with a vendor service.
GF.dev TLS Cipher Suite Scanner
A free web tool that reports the TLS version and cipher suite a server negotiates.
GF.dev TLS Cipher Suite Scanner is a quick free web check of the negotiated TLS version and cipher, far narrower than a full SSLyze scan.
Also worth comparing
These listings name SSLyze as their own alternative, so the relationship runs both ways.
CDN77 TLS Test
A free web checker from CDN77 that lists the SSL and TLS versions a server supports.
SSLyze is an open-source command-line scanner and Python library with JSON output suited to automation, with no graphical interface.
tlsx
Inspect TLS connections and certificates from the terminal.
SSLyze analyses server TLS configuration from the command line or as a Python library, with JSON output and a Docker image.
Similar software
Related functionality, not a direct replacement.
Security Headers
A web service that analyses a site's HTTP response headers and grades them from A+ to F.
crt.sh
A free web search engine for certificates recorded in public Certificate Transparency logs.
Internet.nl
A web test that checks websites, mail domains and connections for modern Internet standards support.
HTTP Observatory
Mozilla's web tool that grades a site's HTTP security headers and gives fix recommendations.
CAA Test
A web tool that checks the DNS CAA records published for a domain.
