Mozilla TLS Scanner

API

Free TLS/SSL Configuration Scanning API by Mozilla

Overview

The Mozilla TLS Scanner API (part of the TLS Observatory project) offers endpoints to scan domains for TLS/SSL configuration issues, retrieve detailed scan reports, and fetch certificate metadata. Responses are in JSON format. Key endpoints include submitting scan requests, checking status, and accessing results (e.g., TLS version support, cipher suite strength, certificate validity). Ideal for developers integrating security checks into apps, DevOps teams automating SSL audits, and researchers analyzing TLS adoption trends, leveraging Mozilla’s Observatory rules for compliance with best practices.

Example Integration (JavaScript)

script.js JS


fetch('https://github.com/mozilla/tls-observatory#api-endpoints')
  .then(res => res.json())
  .then(data => console.log(data))
  .catch(err => console.error(err));

Key Features

RESTful API
JSON Responses
TLS/SSL Compliance Checks
Certificate Validation
Mozilla Observatory Rule Integration

Frequently Asked Questions

? Is Mozilla TLS Scanner free to use?

Yes, the API is free for public use, though rate limits may apply to prevent abuse.

? Does it require an API Key?

No, basic API endpoints do not require an API key for access.

? What is the response format?

All responses are in JSON format, including scan results, certificate details, and status updates.

Top Alternatives

Qualys SSL Labs API Search Google

Tool Info

Pricing Free

Category Security

Platform Public API

Pros

⊕ Free public access
⊕ Open-source tooling
⊕ Comprehensive scan reports
⊕ Focus on industry best practices

Cons

⊖ Rate-limited for high-volume usage
⊖ No official service-level agreement (SLA)
⊖ Limited advanced scan customization