SSL Vulnerability Scan
Passive security posture scan combining TLS and HTTP header analysis.
Combines deep TLS inspection with an HTTP security header review into a single graded report. Entirely passive — one ordinary HTTPS request plus standard handshakes; no exploitation, fuzzing or load is generated.
Passive analysis only — standard handshakes plus one ordinary HTTPS request. No exploitation is attempted.
Privacy: The scan originates from our servers; your IP is never exposed to the target.
Related tools
Frequently asked questions
Is this scan safe to run on my site?
Yes. It performs only passive observations comparable to a normal browser visit — no attack traffic of any kind.
What does the grade mean?
A+ to F heuristic based on open findings: expired/mismatched certificates, legacy protocols, missing HSTS/CSP headers, etc.