Get started
Tools / Security HTTPx / Use Cases / Check SSL/TLS Configuration

Check SSL/TLS Configuration

Verify SSL/TLS certificate validity, protocol versions, and cipher suite configurations across your hosts.

Tool
Security HTTPx icon
Security HTTPx

SSL/TLS protects data in transit between clients and your servers. But having a certificate is not enough -- the configuration matters. Expired certificates break trust. Weak cipher suites can be cracked. Old protocol versions like TLS 1.0 and 1.1 have known vulnerabilities. Misconfigured certificate chains cause warnings. Missing HSTS headers allow protocol downgrade attacks.

The probe_hosts skill checks SSL/TLS configuration across your hosts, verifying certificate validity, protocol support, cipher strength, certificate chain completeness, and HSTS enforcement. It flags expired or soon-to-expire certificates, weak configurations, and missing security features.

This is essential for organizations managing many domains and certificates. Manual certificate tracking leads to embarrassing expirations. Inconsistent TLS configurations across services create weak spots. Automated probing ensures every host maintains the same high standard of transport security and catches configuration drift before it causes outages or vulnerabilities.

Agent Guides

Claude

  1. Connect ToolRouter: claude mcp add toolrouter -- npx -y toolrouter-mcp
  2. Ask Claude: "Check the SSL/TLS configuration on my hosts using security-httpx" and provide the domains
  3. Claude probes each host and reports on certificate validity, protocols, and cipher suites
Read full guide →

ChatGPT

  1. Configure ToolRouter in ChatGPT
  2. Ask: "Check SSL/TLS configuration across my domains" and provide the list
  3. ChatGPT probes each host and reports certificate and protocol details
Read full guide →

Copilot

  1. Add ToolRouter to Copilot MCP config
  2. In Copilot Chat: "Check SSL/TLS configuration on my domains" and list them
  3. Copilot probes and returns certificate and protocol details
Read full guide →

OpenClaw

  1. Connect ToolRouter: openclaw mcp add toolrouter -- npx -y toolrouter-mcp
  2. Ask OpenClaw: "Check SSL/TLS configuration on my hosts"
  3. OpenClaw probes and reports certificate and protocol details
Read full guide →

Related Use Cases

Open Probe Security Headers

Probe Security Headers

Check HTTP security headers across your web properties to identify missing protections like CSP, HSTS, and X-Frame-Options.

Security HTTPx icon
Security HTTPx4 agent guides
Open Discover Hidden Services

Discover Hidden Services

Find hidden or forgotten web services running on your infrastructure that may be exposed without your knowledge.

Security HTTPx icon
Security HTTPx4 agent guides
Open Enumerate Subdomains

Enumerate Subdomains

Discover all subdomains of a domain to map the full attack surface and find forgotten or hidden services.

Security HTTPx icon
Security HTTPx4 agent guides
Open Detect Web Technologies

Detect Web Technologies

Identify the web technologies, frameworks, and server software running on target hosts.

Security HTTPx icon
Security HTTPx4 agent guides

Related Workflows

Full Security AssessmentComprehensive security assessment combining infrastructure probing, vulnerability scanning, penetration testing, and CVE intelligence.SSL and DNS AuditAudit SSL certificates, DNS configuration, HTTP security headers, and domain registration for security gaps.Subdomain Security ScanEnumerate subdomains, probe services, scan for takeover vulnerabilities, and capture visual evidence.Infrastructure Health CheckVerify DNS resolution, service availability, and server locations to ensure infrastructure is healthy and correctly configured.Web Application Security TestCrawl a web application, analyze HTTP security, test for injections, and document findings with screenshots.Network ReconnaissanceMap the complete network attack surface through DNS enumeration, geolocation, service probing, and attack vector analysis.API Security TestingTest API endpoints for authentication flaws, injection vulnerabilities, and compliance with OWASP API Security Top 10.Certificate MonitoringMonitor SSL/TLS certificates for expiration, verify TLS configuration, and confirm domain ownership alignment.Cloud Security AuditAudit cloud infrastructure by discovering assets, probing for misconfigurations, testing cloud-specific attacks, and checking CVEs.Third-Party Risk AssessmentAssess third-party vendor security through identity verification, external security probing, attack surface analysis, and breach history.Continuous Security MonitoringMaintain ongoing security visibility through DNS monitoring, service probing, vulnerability scanning, and CVE tracking.Dark Web Exposure CheckCheck for organizational data exposure on the web including credential leaks, paste sites, and breach databases.