I am looking for a tool to check the security of the https services I offer.

I want to be sure the SSL cipher suite, the protocol version ... is secure.

Maybe checking for some CVE Vulnerabilities would be nice.

The output should be machine readable, to make it executable in a daily job which does alert if something is insecure.

  • Have you tried openssl s_client -connect host:port? If used in a script, I am sure you could limit the information you get out of it to what you need only and then submit the protocol version via API to a CVE database and read the results. Requires some work on your side but it should pay off. – Elhitch Sep 20 '19 at 12:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.