DEV Community

Maximus Beato
Maximus Beato

Posted on • Originally published at apimesh.xyz

how to quickly audit ssl/tls security across multiple domains with an api

the problem

managing ssl/tls configurations for multiple sites can be time-consuming and error-prone. you need to identify weak protocols and cipher suites to ensure your sites are secure, but manual checks are tedious.

the solution

introduce the ssl-tls-configuration-ranker api. it aggregates publicly available scan data, dns records, and certificate transparency logs to evaluate and score ssl configurations across multiple sites. this lets you quickly see which sites have weak or outdated ssl setups.

example request:



curl -G https://ssl-tls-configuration-ranker.apimesh.xyz/check --data-urlencode "sites=example.com,foo.com"

**sample output:**


{
  "scores": {
    "example.com": "good",
    "foo.com": "weak"
  },
  "details": {
    "example.com": { "protocols": ["TLS 1.2", "TLS 1.3"], "cipher_suites": ["AES_256_GCM"] },
    "foo.com": { "protocols": ["SSL 3.0"], "cipher_suites": ["RC4"] }
  }
}


## how it works
the api pulls data from publicly available ssl scans, dns records, and certificate transparency logs. it evaluates protocols supported, cipher suites, and overall configuration strength, then scores and highlights weak setups.

## try it out
check your sites now with the free preview at https://ssl-tls-configuration-ranker.apimesh.xyz/preview. for full access, calls are $0.005 each.

secure your infrastructure, identify weaknesses faster, and stay compliant without the manual grind.
Enter fullscreen mode Exit fullscreen mode

Top comments (0)