Free SSL/TLS Checker

Verify SSL/TLS configuration for any hostname

Enter any hostname to check its SSL/TLS configuration. This tool connects over HTTPS and inspects transport security headers, HSTS configuration, and certificate-related response data to identify misconfigurations that could leave your site vulnerable to man-in-the-middle attacks.

Trusted by teams at

Ramp
Pilot
Vercel
Stripe
Better Auth
SST
OpenCode

How it works

How SSL/TLS Checker works

01

Enter a hostname

Type any hostname or domain name. We strip protocols and paths automatically, then connect over HTTPS.

02

Inspect TLS configuration

We connect to the hostname over HTTPS and analyze the response for transport security headers, HSTS policy, and certificate-related indicators.

03

Get security recommendations

Receive a detailed assessment of your TLS configuration with specific recommendations for improving transport security.

Features

What SSL/TLS Checker checks

HSTS policy verification

Checks whether Strict-Transport-Security is present and analyzes max-age, includeSubDomains, and preload directives that force browsers to use HTTPS exclusively.

HTTPS redirect detection

Tests whether HTTP requests are properly redirected to HTTPS and whether the redirect chain is secure, catching common misconfigurations.

Transport security header analysis

Examines all TLS-related response headers including Expect-CT, certificate pinning indicators, and protocol-related settings.

Certificate transparency check

Verifies Expect-CT header configuration and checks whether the site opts in to certificate transparency monitoring.

Use cases

Who should use the free SSL/TLS Checker

DevOps Engineers

Verify HTTPS and HSTS are correctly configured after deploying new certificates, changing CDN providers, or updating load balancer settings.

Security Teams

Audit transport security across your organization's web properties. Ensure consistent HSTS policies and proper HTTPS enforcement on all domains.

Compliance Officers

Document your TLS configuration for PCI DSS, SOC 2, and HIPAA audits that require encrypted data in transit and secure certificate management.

FAQ

Frequently asked questions

Everything you need to know about the free SSL/TLS Checker.

Go beyond SSL/TLS Checker

This free SSL/TLS Checker checks a handful of things. Maced's AI pentest checks thousands.

Get a full autonomous penetration test — including OWASP Top 10, authentication flaws, business logic errors, API security, and more — with a compliance-ready report in hours.

Proof of exploit on every finding · SOC 2 & ISO 27001 compatible