{"categories":[{"label":"Monitoring","url":"https://skillfed.io/packages/category/system-monitoring/4"},{"label":"Security","url":"https://skillfed.io/packages/category/security/2"},{"label":"Networking","url":"https://skillfed.io/packages/category/system-networking/2"},{"label":"Monitoring","url":"https://skillfed.io/packages/category/system-networking-monitoring"}],"enrichment":{"capability":"SSLyze is a fast SSL/TLS scanning tool and Python library that analyzes server configurations for encryption strength and known TLS vulnerabilities by connecting and inspecting certificate, cipher suites, and protocol settings.","skillfed_tags":["tls-audit","compliance-checking","cryptography"],"use_cases":["Audit a web server's TLS configuration to identify weak ciphers or outdated protocol versions before deployment.","Run SSLyze as a CI/CD step to enforce Mozilla's modern TLS configuration and fail builds that don't comply.","Scan SMTP or LDAP servers to verify they support strong encryption and are not vulnerable to known attacks.","Build a security monitoring dashboard that periodically scans your organization's servers and exports results to JSON for alerting.","Test a custom TLS policy by defining allowed certificate types, cipher suites, and versions in a JSON file and validating servers against it."],"what_it_does":"SSLyze is a Python library and command-line tool for analyzing the SSL/TLS configuration of remote servers. It connects to a server, inspects its certificate, supported cipher suites, protocol versions, and elliptic curves, then reports on encryption strength and known vulnerabilities like Heartbleed, ROBOT, and OpenSSL CCS injection. It supports scanning non-HTTP servers including SMTP, XMPP, LDAP, POP, IMAP, RDP, Postgres, and FTP.\n\nThe tool is designed for both one-off security audits and continuous compliance checking. It can validate server configurations against Mozilla's recommended TLS profiles (old, intermediate, modern) or custom JSON-defined policies, making it suitable for CI/CD integration. Results can be exported to JSON for further processing. The library exposes a full Python API for embedding scans into applications, such as Lambda functions or custom security tools.","worth_installing":"Yes, with conditions. SSLyze is actively maintained, has no known vulnerabilities, and is well-suited for TLS auditing and compliance checking. However, the AGPL license is restrictive\u2014proprietary projects must either accept copyleft obligations or avoid it. High install friction (native dependencies) may complicate deployment in some environments. Install if you need TLS scanning and can accept AGPL terms."},"id":"sslyze","links":{"html":"https://skillfed.io/packages/sslyze","md":"https://skillfed.io/packages/sslyze.md","pypi":"https://pypi.org/project/sslyze/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-03-29","license_spdx":null,"license_treatment":"agpl","name":"sslyze","python_support":"supports_current","summary":"Fast and powerful SSL/TLS scanning library."},"popularity":{"monthly_downloads":127082,"position":11754,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"6.3.1"}