https://cybertoolchain.io/tools/sslyze New releases and features in sslyze, tracked by The Cyber Toolchain. en Tue, 30 Dec 2025 10:27:37 GMT https://github.com/nabla-c0d3/sslyze/releases/tag/6.3.0 https://github.com/nabla-c0d3/sslyze/releases/tag/6.3.0 Tue, 30 Dec 2025 10:27:37 GMT sslyze 6.3.0 adds Python 3.14 support and expands elliptic curve scanning to include Brainpool curves. • Supports Python 3.14 runtime. • Extends `EllipticCurvesScanPlugin` (the `--elliptic_curves` scan) to detect Brainpool curve support in addition to previously covered curves. Breaking changes: • Python 3.9 is no longer supported; running sslyze on Python 3.9 will break after upgrading. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslyze https://github.com/nabla-c0d3/sslyze/releases/tag/6.2.0 https://github.com/nabla-c0d3/sslyze/releases/tag/6.2.0 Sun, 03 Aug 2025 20:40:43 GMT sslyze 6.2.0 adds custom TLS compliance profiles and SNI-less certificate chain retrieval. • Supports specifying a custom TLS configuration/profile to validate servers against, as an alternative to the built-in Mozilla old/intermediate/modern profiles. • Supports retrieving a server's certificate chain when no Server Name Indication (SNI) is supplied via `--certinfo`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslyze https://github.com/nabla-c0d3/sslyze/releases/tag/6.1.0 https://github.com/nabla-c0d3/sslyze/releases/tag/6.1.0 Sat, 04 Jan 2025 09:16:15 GMT sslyze 6.1.0 adds Extended Master Secret detection, custom HTTP agent/SMTP EHLO support, and configurable renegotiation attempts. • New check: detects whether the Extended Master Secret TLS extension is supported by the target server. • Enables supplying a custom HTTP agent via the Python API for HTTPS scanning. • Enables supplying a custom SMTP EHLO hostname via the Python API for STARTTLS scanning. • Enables configuring the number of client renegotiation test attempts via the Python API. • Adds experimental support for aarch64-based Linux. • Adds support for Python 3.13. Breaking changes: • Support for Python 3.8 has been removed; setups running sslyze under Python 3.8 will break. • Support for Intel-based Macs has been removed; sslyze will no longer run on that platform. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslyze https://github.com/nabla-c0d3/sslyze/releases/tag/5.2.0 https://github.com/nabla-c0d3/sslyze/releases/tag/5.2.0 Sun, 24 Sep 2023 14:58:30 GMT sslyze 5.2.0 adds pydantic 2.x support and updates Windows build to Python 3.11 • Adds support for pydantic 2.x in the core library. Breaking changes: • Python 3.7 is no longer supported; this is the last release with Python 3.7 compatibility. • pydantic 1.x is no longer supported; this is the last release with pydantic 1.x compatibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslyze https://github.com/nabla-c0d3/sslyze/releases/tag/5.1.3 https://github.com/nabla-c0d3/sslyze/releases/tag/5.1.3 Sat, 01 Apr 2023 13:44:31 GMT SSlyze 5.1.3 adds native Apple Silicon support and drops Windows 7 • Removes support for Windows 7 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslyze https://github.com/nabla-c0d3/sslyze/releases/tag/5.1.0 https://github.com/nabla-c0d3/sslyze/releases/tag/5.1.0 Tue, 17 Jan 2023 20:53:50 GMT sslyze 5.1.0 adds Brainpool curve support, IP SAN validation, and Python 3.11 compatibility. • Adds `--elliptic_curves` detection of Brainpool curves • Adds certificate validation for Subject Alternative Names containing IP addresses • Adds Python 3.11 platform support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslyze https://github.com/nabla-c0d3/sslyze/releases/tag/5.0.6 https://github.com/nabla-c0d3/sslyze/releases/tag/5.0.6 Sat, 15 Oct 2022 11:15:25 GMT sslyze 5.0.6 adds support for more TLS stacks in elliptic curve scanning and documents JSON export via Python API • Adds support for more TLS stacks when connecting and scanning for elliptic curves Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslyze https://github.com/nabla-c0d3/sslyze/releases/tag/5.0.3 https://github.com/nabla-c0d3/sslyze/releases/tag/5.0.3 Sun, 13 Mar 2022 21:10:47 GMT sslyze 5.0.3 adds `--mozilla_config=disable` to skip Mozilla profile checks • Disables server scan result checking against Mozilla configurations via `--mozilla_config=disable` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslyze https://github.com/nabla-c0d3/sslyze/releases/tag/5.0.0 https://github.com/nabla-c0d3/sslyze/releases/tag/5.0.0 Fri, 26 Nov 2021 23:47:52 GMT sslyze 5.0 adds Mozilla TLS config checking, CI/CD support, typed Python API for JSON parsing, and simplified session resumption testing. • `--mozilla-config={old, intermediate, modern}` flag to check servers against Mozilla's recommended configurations • Ability to run as a CI/CD step via the README instructions • Fully-typed Python API for parsing JSON output using `SslyzeOutputAsJson.parse_file` • `--resum_attempts` option to configure session resumption attempts (default 5) • Auto-generated JSON schema available at `./json_output_schema.json` Breaking changes: • The `--regular` flag has been removed and replaced by `--mozilla-config` • The Python API for starting scans and processing results has changed significantly • `public_key_pins_header` and `public_key_pins_report_only_header` fields removed from `HttpHeadersScanResult` • The `--resum_rate` command, `ScanCommand.SESSION_RESUMPTION_RATE`, and `SessionResumptionRateScanResult` class have been removed in favor of `--resum_attempts` and `SessionResumptionSupportExtraArguments` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslyze