testssl
« Back to VersTracker
Description:
Tool which checks for the support of TLS/SSL ciphers and flaws
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: security tls ssl auditing networking cli
Install: brew install testssl
About:
Testssl.sh is a command-line tool that checks for the support of TLS/SSL ciphers, protocols, and cryptographic flaws on a server. It provides detailed information about the SSL/TLS configuration without requiring local installation of specific versions of OpenSSL. This tool is invaluable for security audits and ensuring robust encryption standards.
Key Features:
  • Checks TLS/SSL ciphers, protocols, and flaws
  • Works everywhere (no dependencies required)
  • Reads input from STDIN or files
  • Can check specific vulnerabilities (e.g., Heartbleed)
Use Cases:
  • Auditing web server SSL/TLS configurations
  • Checking for specific vulnerabilities like Heartbleed or POODLE
  • Verifying certificate validity and chain of trust
Alternatives:
  • OpenSSL s_client – Requires local OpenSSL installation; Testssl is more portable and offers more comprehensive checks out of the box.
  • Nmap ssl-enum-ciphers – Nmap is a network scanner with an SSL script; Testssl is a dedicated tool specifically for SSL/TLS auditing with more granular detail.
Version History
Detected Version Rev Change Commit