Your site's TLS config is one bad handshake away from a CVE writeup.

I built testls to catch that before it happens. It scans your domain and flags:

Expired or near-expiry certs
Weak ciphers / protocols (TLS 1.0/1.1)
Misconfigured HSTS
Chain issues
It's a single binary, no dependencies, runs in seconds.

testls example.com

Built it because existing tools (testssl.sh, SSL Labs) are either overkill, web-only or shell only. I wanted something I could easy drop into CI (currently available on github actions marketplace) or run from a terminal in 5 seconds, but also something organizations can run at scale to create observability dashboards to monitor their websites certificate health over time.

Repo: github.com/kjpopov/testls

Feedback welcome, a star helps and boosts my motivation.