- Home
- Security audits
- Surface audit
SSL/TLS and surface audit: what an attacker sees of your website
Enter a domain: within minutes, KrakenShield grades its TLS configuration from A+ to F following the SSL Labs method, checks the certificate, the security headers and the public footprint of the domain, then tells you what to fix first.
Free
- Any public website, no ownership check
- Non-intrusive
- PDF report
Encryption, certificate and everything visible from outside
The analysis relies on the open source testssl.sh engine, kept up to date, and on public sources. It only sends requests a browser could send.
A grade from A+ to F
The overall grade of your TLS configuration, computed with the SSL Labs method, with what lowers it and what to change to raise it.
Protocols and ciphers
Accepted versions from SSL 2 to TLS 1.3, cipher suites, forward secrecy and known TLS flaws.
Certificate
Validity, certificate chain, covered names, issuing authority, key size and expiry date.
HTTPS and security headers
Redirect to HTTPS, HSTS, Content-Security-Policy, X-Frame-Options, Referrer-Policy and disclosed server version.
Public footprint
Hosting, DNS records, publicly visible subdomains and detected technologies.
Email security
SPF and DMARC: what prevents, or not, your domain from being spoofed in phishing emails.
Three steps, a few minutes
- 1
Enter the domain
Your website, a client’s or a supplier’s: the audit covers what is public, with no ownership check.
- 2
The analysis runs
The console shows progress live. Kredits are reserved during the analysis and deducted only if it succeeds.
- 3
Fix and run again
Every finding comes with its fix. Run the audit again after your changes and compare both results.
A report that says what to do, not only what is wrong
The same content is available in the console and as a PDF to send to your host or provider.
- SSL/TLS grade from A+ to F and the factors capping it
- Findings ranked by severity, each with its fix
- Apache and Nginx configuration examples
- Comparison of two audits of the same domain
- Share link for the SSL report, if you wish
Audit cost
Free
The cost is shown before you confirm and is deducted only if the audit succeeds.
A Kredit costs €29 to €19.03 excl. VAT depending on the pack.
PricingWhat the audit does not do
- It does not scan your server’s ports or attempt any intrusion: that is the penetration test’s job.
- It does not read your code: that is the code analysis’ job.
What people ask us
Do I need to prove that I own the website?
No. The surface audit only uses public information and ordinary requests: you can audit any public website, for example a supplier’s.
How long does the audit take?
Usually a few minutes. The console shows progress and you can leave the page: the result waits for you in the history.
Is the grade the same as SSL Labs’?
The grade follows the method published by SSL Labs (protocols, key exchange, ciphers, caps). Both tools may differ slightly depending on the date of the analysis and the available tests.
Can the audit disrupt my website?
No. It opens a few TLS connections and HTTP requests, like a browser. No particular load, no intrusion attempt.
