TLS Cipher Scanner

Scan TLS cipher suite support

About TLS Cipher Scanner

Our TLS Cipher Scanner probes a server to identify all supported cipher suites across different TLS versions. It categorizes ciphers by strength and security level, helping you identify weak or deprecated ciphers like RC4, 3DES, and CBC-mode ciphers. Use it to harden your server's cipher configuration and ensure only modern, secure ciphers are available.

How to Use

1Enter the server domain or hostname to scan.
2Click "Check" to start the cipher scan.
3Review the list of supported ciphers per TLS version.
4Identify and disable any weak or deprecated ciphers.

Use Cases

•Audit server cipher configuration for security compliance
•Detect weak ciphers like RC4, 3DES, or export-grade ciphers
•Verify only TLS 1.2/1.3 modern ciphers are enabled
•Prepare for security audits and penetration testing

Frequently Asked Questions

RC4, 3DES, export-grade ciphers, and CBC-mode ciphers are considered weak and should be disabled.

Modern ciphers like TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, and ECDHE-ECDSA-AES128-GCM-SHA256 are recommended.

Yes. It scans ciphers for TLS 1.0 through TLS 1.3 and reports supported ciphers per version.

A full cipher scan typically completes in 10-30 seconds depending on the server's response time.

Tips & Best Practices

•Run cipher scans after every TLS configuration change
•Compare cipher scans before and after hardening to verify improvements
•Address critical cipher findings (export-grade, NULL, weak) immediately
•Use cipher scan results to create standardized configurations

Technical Details

Ciphers: 300+ cipher suites including all standard configurations
Testing: Direct connection testing for accurate cipher detection
Rating: A-F rating for cipher configuration security
Output: Complete cipher list with security assessment