Analyze the SSL/TLS configuration of any domain to assess security strength. The API grades (A–F) the target, checks supported protocols & ciphers, detects weak configurations, extracts certificate details, and flags common vulnerabilities like Heartbleed or expired certificates.

Endpoint: 

GET & POST: /analyze

Parameters:

Python Requests Example:

import requests
url = "https://ssl-tls-security-analyzer-api.p.rapidapi.com/analyze"
querystring = {"domain":"google.com","timeout":"5","port":"443"}
headers = {
"x-rapidapi-host": "ssl-tls-security-analyzer-api.p.rapidapi.com",
"x-rapidapi-key": "YOUR_RAPIDAPI_KEY"
}
response = requests.get(url, headers=headers, params=querystring)
print(response.json())

Response Example:

{
"certificate": {
"days_until_expiry": 64,
"expired": false,
"issuer": {
"commonName": "WR2",
"countryName": "US",
"organizationName": "Google Trust Services"
},
"not_after": "2025-11-17T08:39:46+00:00",
"not_before": "2025-08-25T08:39:47+00:00",
"subject": {
"commonName": "*.google.com"
}
},
"cipher_list": [
"TLS_AES_256_GCM_SHA384"
],
"domain": "google.com",
"port": 443,
"ssl_grade": "C",
"tls_versions": [],
"vulnerabilities": [
"Heartbleed: Deep Heartbleed checks not performed by default."
],
"weak_ciphers": []
}