TLS Version Checker
Find out which SSL/TLS protocol versions a server still accepts, from SSLv2 to TLS 1.3, and get a score for the configuration.
- Runs on our servers
- Free to use
- API available →
About this tool
Supporting old TLS versions keeps a server compatible with ancient clients at the cost of exposing every user to downgrade attacks. The TLS Version Checker attempts a handshake with each protocol version and reports, for each one, whether it is enabled, deprecated and what the recommended state is, summarised as a score from poor to excellent. Results come from the APIVoid TLS Check API.
Use it before a compliance audit, after changing your server configuration, or to evaluate a vendor. Certificate details are on the SSL Certificate Check page.
How to use it — quick steps
- 01
Enter the domain or hostname
Type or paste the domain or hostname in the field above, for example www.example.com.
- 02
Press "Check TLS versions"
Press "Check TLS versions" or Ctrl + Enter. The result appears below in a few seconds. Results can be copied.
- 03
Read the result
It appears in the dark panel under the form in a few seconds. Every block has [copy] and other actions.
Key features of this tool
External lookups
The lookup runs from our infrastructure, so you see what the public internet sees without exposing your own IP address or network.
Fast and cached
Results come back in seconds; identical lookups are cached for a few minutes to keep the service fast and responsive for everyone.
Easy to reuse
Every result block can be copied with one click or downloaded as a text file, and tables can also be saved as CSV for your reports.
Frequently asked questions
Which versions should be enabled?
TLS 1.2 and TLS 1.3 only. TLS 1.0 and 1.1 were deprecated in 2021 (RFC 8996) and fail PCI DSS; SSLv2 and SSLv3 are broken.
My score is "poor" but the certificate is fine
The certificate and the protocol configuration are independent. A perfect certificate served over TLS 1.0 is still a weak setup; disable old protocols in the web server or load balancer configuration.
Does this test cipher suites?
This page tests protocol versions. Cipher-level scanning is available through the APIVoid TLS Check API with the scan_ciphers option.