Tools / Security HTTPx / Use Cases / Check SSL/TLS Configuration / Claude

How to Check SSL/TLS Config with Claude

Audit SSL/TLS configuration with Claude and ToolRouter. Verify certificates and encryption.

Claude turns HTTP service probing into a thorough, conversational security review that connects each finding to its broader implications. Ask Claude to check security headers, discover hidden services, verify SSL configurations, and enumerate subdomains while explaining the risk and remediation for every issue found. Its chaining capability lets you start with a broad reconnaissance and progressively drill into specific areas of concern.

Connect ToolRouter to Claude

1Go to Settings → Connectors → Add custom connector

2Enter the details below and click Add

Name

ToolRouter

URL

https://api.toolrouter.com/mcp

3Done — works on Claude chat, desktop, and mobile

Steps

Once connected (see setup above), use the Security HTTPx tool:

Ask Claude: "Check the SSL/TLS configuration on my hosts using security-httpx" and provide the domains
Claude probes each host and reports on certificate validity, protocols, and cipher suites
Review any expiring certificates, weak protocols, or insecure cipher configurations
Update TLS configurations and renew certificates as needed

Example Prompt

Try this with Claude using the Security HTTPx tool

Check SSL/TLS configuration on myapp.com, api.myapp.com, and mail.myapp.com. Report certificate expiry dates, supported protocols, and cipher strengths.

Tips

Ask Claude to flag certificates expiring within 30 days for proactive renewal
Verify that TLS 1.0 and 1.1 are disabled on all hosts
Check that certificate chains are complete to avoid warnings on mobile devices

More Claude Guides

How to Probe Security Headers with Claude How to Discover Hidden Services with Claude How to Enumerate Subdomains with Claude How to Detect Web Technologies with Claude How to Audit Response Headers with Claude

Related Workflows

Full Security AssessmentComprehensive security assessment combining infrastructure probing, vulnerability scanning, penetration testing, and CVE intelligence.SSL and DNS AuditAudit SSL certificates, DNS configuration, HTTP security headers, and domain registration for security gaps.Subdomain Security ScanEnumerate subdomains, probe services, scan for takeover vulnerabilities, and capture visual evidence.Infrastructure Health CheckVerify DNS resolution, service availability, and server locations to ensure infrastructure is healthy and correctly configured.Web Application Security TestCrawl a web application, analyze HTTP security, test for injections, and document findings with screenshots.Network ReconnaissanceMap the complete network attack surface through DNS enumeration, geolocation, service probing, and attack vector analysis.API Security TestingTest API endpoints for authentication flaws, injection vulnerabilities, and compliance with OWASP API Security Top 10.Certificate MonitoringMonitor SSL/TLS certificates for expiration, verify TLS configuration, and confirm domain ownership alignment.Cloud Security AuditAudit cloud infrastructure by discovering assets, probing for misconfigurations, testing cloud-specific attacks, and checking CVEs.Third-Party Risk AssessmentAssess third-party vendor security through identity verification, external security probing, attack surface analysis, and breach history.Continuous Security MonitoringMaintain ongoing security visibility through DNS monitoring, service probing, vulnerability scanning, and CVE tracking.Dark Web Exposure CheckCheck for organizational data exposure on the web including credential leaks, paste sites, and breach databases.