Developed by Mozilla, the HTTP Observatory performs an in-depth assessment of a site’s HTTP headers and other key security configurations.
Cost / License
- Free
- Open Source (MPL-2.0)
Application type
Platforms
- Online
- Self-Hosted
United States


Apps similar to SSLyze include HTTP Observatory, which is free and open source. Other options are Qualys SSL Server Test, Hardenize, SSL/TLS Security Test by ImmuniWeb and CryptCheck. You can choose from more than 10 Website Audit Tools like SSLyze for the web, Linux, self-hosting, Mac and Windows.
Developed by Mozilla, the HTTP Observatory performs an in-depth assessment of a site’s HTTP headers and other key security configurations.


This free online service performs a deep analysis of the configuration of any SSL web server on the public Internet. Please note that the information you submit here is used only to provide you the service. We don't use the domain names or the test results, and we never will.

Hardenize provides a comprehensive and free assessment of web site network and security configuration.



The Website Security Test is a free online tool to perform web security and privacy tests:

CryptCheck is a Ruby toolbox that help anybody to check for cryptography security level and best practices compliance.
Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line.
Comprehensive SSL/TLS monitoring. We proactively monitor your SSL/TLS enabled domains to prevent expiry, misconfiguration, and insecure protocols. We watch and report any changes to your certificate so you can detect and respond to attempts at tampering or domain takeover.




As the project name CryptoLyzer implies, it is a cryptographic protocol analyzer. The main purpose of creating this
Watch My SSL is a service that monitors the SSL certificates of your domains to ensure they do not expire unexpectedly. Receive notifications before SSL certificate expiry and monitor multiple domains and subdomains.

Reviewing a website's Content-Security-Policy settings, suggesting improvements to protection, and possible bypasses to the policy.
