Your site's TLS config is one bad handshake away from a CVE writeup.
I built testls to catch that before it happens. It scans your domain and flags:
Expired or near-expiry certs
Weak ciphers / protocols (TLS 1.0/1.1)
Misconfigured HSTS
Chain issues
It's a single binary, no dependencies, runs in seconds.
testls example.com
Built it because existing tools (testssl.sh, SSL Labs) are either overkill, web-only or shell only. I wanted something I could easy drop into CI (currently available on github actions marketplace) or run from a terminal in 5 seconds, but also something organizations can run at scale to create observability dashboards to monitor their websites certificate health over time.
Repo: github.com/kjpopov/testls
Easy to use in github actions:
- uses: kjpopov/testls@v0.6.0 with: args: --fail-on medium example.com Feedback welcome, a star helps and boosts my motivation.
