7 ms·

What other/similar analyzers are out there?

by russum 11y ago

mattvot 11y ago
For SSL from Qualys, Inc https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/
- tanthony01 11y ago
  Last I checked, Qualys only scanned port 443. I like testssl.sh - you can point it at arbitrary ports: https://testssl.sh/ https://testssl.sh/ https://github.com/drwetter/testssl.sh https://github.com/drwetter/testssl.sh
  - stefanorri 11y ago
    testssl.sh is also great for testing internal servers which aren't internet accessible.
Scott_Helme_ 11y ago
There's also https://starttls.info/ https://starttls.info/ which will check mail server configurations.
- mwpmaybe 11y ago
  Huh, comes up with a cert warning. Looks like it's expired.
cmcnally 11y ago
https://mxtoolbox.com/ https://mxtoolbox.com/ can give some decent information when setting up a mail server.
stefanorri 11y ago
HTTPSecurityReport - https://httpsecurityreport.com https://httpsecurityreport.com - Disclaimer: I'm the creator. Site Scan from MS - https://dev.windows.com/en-us/microsoft-edge/tools/staticscan/ https://dev.windows.com/en-us/microsoft-edge/tools/staticsca... Subresource Integrity scanner - https://sritest.io/ https://sritest.io/
- Beowolve 11y ago
  Thanks for these! I like that yours covered a lot more than the one OP posted.
  - stefanorri 11y ago
    Thanks, glad to hear it!
- mwpmaybe 11y ago
  HTTPSecurityReport is great! Thank you!
- newman314 11y ago
  Maybe you can add HTTP2/SPDY detection too. BTW your HSTS test does not verify if the format/syntax is correct. -- These are all good but I would include the following: Qualys SSL Server Test - The first site I use. testssl.sh - for behind the fireware testing https://tls.imirhil.fr/ https://tls.imirhil.fr/ - this one is nice because it shows the ciphers used/avail broken down by TLS version. I have not seen any other site do this.
finnn 11y ago
https://ssl-tools.net/ https://ssl-tools.net/ is nice because it will continously retest and email you if there's a problem. Also does mail servers

What other/similar analyzers are out there?

by russum 11y ago

What other/similar analyzers are out there?

mattvot 11y ago

For SSL from Qualys, Inc https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/

tanthony01 11y ago
Last I checked, Qualys only scanned port 443. I like testssl.sh - you can point it at arbitrary ports: https://testssl.sh/ https://testssl.sh/ https://github.com/drwetter/testssl.sh https://github.com/drwetter/testssl.sh
- stefanorri 11y ago
  testssl.sh is also great for testing internal servers which aren't internet accessible.

Scott_Helme_ 11y ago

There's also https://starttls.info/ https://starttls.info/ which will check mail server configurations.

mwpmaybe 11y ago
Huh, comes up with a cert warning. Looks like it's expired.

cmcnally 11y ago

https://mxtoolbox.com/ https://mxtoolbox.com/ can give some decent information when setting up a mail server.

stefanorri 11y ago

HTTPSecurityReport - https://httpsecurityreport.com https://httpsecurityreport.com - Disclaimer: I'm the creator. Site Scan from MS - https://dev.windows.com/en-us/microsoft-edge/tools/staticscan/ https://dev.windows.com/en-us/microsoft-edge/tools/staticsca... Subresource Integrity scanner - https://sritest.io/ https://sritest.io/

Beowolve 11y ago
Thanks for these! I like that yours covered a lot more than the one OP posted.
- stefanorri 11y ago
  Thanks, glad to hear it!
mwpmaybe 11y ago
HTTPSecurityReport is great! Thank you!
newman314 11y ago
Maybe you can add HTTP2/SPDY detection too. BTW your HSTS test does not verify if the format/syntax is correct. -- These are all good but I would include the following: Qualys SSL Server Test - The first site I use. testssl.sh - for behind the fireware testing https://tls.imirhil.fr/ https://tls.imirhil.fr/ - this one is nice because it shows the ciphers used/avail broken down by TLS version. I have not seen any other site do this.

finnn 11y ago

https://ssl-tools.net/ https://ssl-tools.net/ is nice because it will continously retest and email you if there's a problem. Also does mail servers