Pricing

from $0.01 / actor invocation

TLSX - TLS Data Gathering and Analysis

Apify Actor wrapper for ProjectDiscovery's tlsx, a fast and configurable TLS grabber for TLS-based data collection and analysis.

Pricing

from $0.01 / actor invocation

Rating

0.0

(0)

Developer

R.L.

Actor stats

Bookmarked

Total users

Monthly active users

13 days ago

Last modified

Categories

Developer tools

Target host(s)

host

Optional

Target host(s) to scan. Accepts IP, CIDR, ASN, DNS name, DNS name with port, or URL (-u/-host).

Type:array

Port(s)

port

Optional

Target port(s) to connect to (-p/-port). Default 443.

Type:array

Scan mode

scanMode

Optional

TLS connection mode to use (-sm/-scan-mode).

Type:string

Default:auto

Options:

autoctlsztlsopenssl

Pre-handshake (early termination)

preHandshake

Optional

Enable pre-handshake TLS connection using ztls (-ps/-pre-handshake).

Type:boolean

Default:false

Scan all IPs

scanAllIps

Optional

Scan all resolved IPs for a host (-sa/-scan-all-ips).

Type:boolean

Default:false

IP version(s)

ipVersion

Optional

IP version(s) to use (-iv/-ip-version). Values: 4, 6.

Type:array

Display Subject Organization

Optional

-so

Type:boolean

Default:false

Display TLS version

tlsVersion

Optional

-tv/-tls-version

Type:boolean

Default:false

Display cipher used

cipher

Optional

-cipher

Type:boolean

Default:false

Certificate fingerprint hashes

hash

Optional

-hash. Values: md5, sha1, sha256.

Type:array

Display JARM fingerprint

jarm

Optional

-jarm

Type:boolean

Default:false

Display JA3 fingerprint (ztls)

ja3

Optional

-ja3

Type:boolean

Default:false

Display wildcard certificate hosts

wildcardCert

Optional

-wc/-wildcard-cert

Type:boolean

Default:false

Display TLS probe status

probeStatus

Optional

-tps/-probe-status

Type:boolean

Default:false

Enumerate supported TLS versions

versionEnum

Optional

-ve/-version-enum

Type:boolean

Default:false

Enumerate supported ciphers

cipherEnum

Optional

-ce/-cipher-enum

Type:boolean

Default:false

Cipher types to enumerate

cipherType

Optional

-ct/-cipher-type. Values: all, secure, insecure, weak.

Type:array

Include client hello in JSON output (ztls)

clientHello

Optional

-ch/-client-hello

Type:boolean

Default:false

Include server hello in JSON output (ztls)

serverHello

Optional

-sh/-server-hello

Type:boolean

Default:false

Display certificate serial number

serial

Optional

-se/-serial

Type:boolean

Default:false

Expired certificate

expired

Optional

-ex/-expired

Type:boolean

Default:false

Self-signed certificate

selfSigned

Optional

-ss/-self-signed

Type:boolean

Default:false

Mismatched certificate

mismatched

Optional

-mm/-mismatched

Type:boolean

Default:false

Revoked certificate

revoked

Optional

-re/-revoked

Type:boolean

Default:false

Untrusted certificate

untrusted

Optional

-un/-untrusted

Type:boolean

Default:false

Custom resolvers

resolvers

Optional

-r/-resolvers

Type:array

Client certificate authority file

cacert

Optional

-cc/-cacert (path or inline PEM content, written to a temp file).

Type:string

Ciphers to use

cipherInput

Optional

-ci/-cipher-input

Type:array

TLS SNI hostname(s)

sni

Optional

-sni

Type:array

Use random SNI when empty

randomSni

Optional

-rs/-random-sni

Type:boolean

Default:false

Reverse PTR to retrieve SNI from IP

revPtrSni

Optional

-rps/-rev-ptr-sni

Type:boolean

Default:false

Minimum TLS version

minVersion

Optional

-min-version

Type:string

Default:

Options:

ssl30tls10tls11tls12tls13

Maximum TLS version

maxVersion

Optional

-max-version

Type:string

Default:

Options:

ssl30tls10tls11tls12tls13

Include certificate (PEM) in JSON output

certificate

Optional

-cert/-certificate

Type:boolean

Default:false

Include certificate chain in JSON output

tlsChain

Optional

-tc/-tls-chain

Type:boolean

Default:false

Verify server certificate

verifyCert

Optional

-vc/-verify-cert

Type:boolean

Default:false

Hardfail strategy on revocation check errors

hardfail

Optional

-hf/-hardfail

Type:string

SOCKS5 proxy

proxy

Optional

-proxy

Type:string

Concurrency

concurrency

Optional

-c/-concurrency

Type:integer

Default:300

Cipher enum concurrency

cipherConcurrency

Optional

-cec/-cipher-concurrency

Type:integer

Default:10

Connection timeout (seconds)

timeout

Optional

-timeout

Type:integer

Default:5

Retries

retry

Optional

-retry

Type:integer

Default:3

Delay between connections

delay

Optional

-delay (e.g. 200ms, 1s)

Type:string

Certificate Transparency (CT) log streaming

ctl

Optional

-ctl. Streams newly issued certs. Bounded by maxRuntimeSecs since this mode never terminates on its own.

Type:boolean

Default:false

CT logs: start from beginning

ctlBeginning

Optional

-cb/-ctl-beginning

Type:boolean

Default:false

CT logs: per-log start index

ctlIndex

Optional

-cti/-ctl-index. Format logURL=index, repeatable.

Type:array

Max runtime (seconds, CT log mode only)

maxRuntimeSecs

Optional

Actor-level guard applied via timeout when CT log streaming is enabled, since -ctl runs indefinitely.

Type:integer

Default:60

Upload to PDCP dashboard

dashboard

Optional

-pd/-dashboard

Type:boolean

Default:false

PDCP API key

auth

Optional

-auth

Type:string

PDCP team ID

teamId

Optional

-tid/-team-id

Type:string

PDCP asset ID

assetId

Optional

-aid/-asset-id

Type:string

PDCP asset name

assetName

Optional

-aname/-asset-name

Type:string

Extra raw CLI flags

extraFlags

Optional

Escape hatch: any additional tlsx flags appended verbatim to the command line.

Type:string

TLS Certificate Monitor

junipr/tls-certificate-monitor

Monitor TLS certificates, expiry, chain health, issuer changes, and HTTPS readiness.

junipr

SSL Certificate Inspector - TLS Audit & Expiry Monitor

santamaria-automations/ssl-certificate-inspector

Inspect SSL/TLS certificates for any domain: chain validation, expiry dates, cipher suites, TLS versions, subject alt names, issuer details, and security scoring. Export data, run via API, schedule and monitor runs, or integrate with other tools.

NanoScrape

Bulk SSL Certificate Checker — Expiry, Issuer & TLS

logiover/bulk-ssl-certificate-checker

Check SSL/TLS certificates for thousands of domains at once — expiry date, issuer, SANs, days remaining, TLS versions supported and chain validation. No API key. Export to CSV or JSON. Ideal for security audits, certificate monitoring and compliance.

Logiover

SSL/TLS Certificate Scraper

taroyamada/ssl-certificate-monitor

Scan thousands of websites for expiring TLS certs, extract fingerprint hashes, and run Google Web Risk malware checks without rendering a browser.

naoki anzai

SSL Certificate Checker API - TLS Expiry Scanner

pink_comic/ssl-certificate-checker

Bulk SSL/TLS certificate checker API for expiry monitoring, HTTPS audits, issuer/SAN extraction, chain validation, TLS version, and cipher-suite evidence. Scan domains for expiring, expired, or misconfigured certificates before outages or compliance reviews.

Ava Torres

TLS Certificate Expiry Evidence

gifted_wagon/ssl-certificate-expiry-evidence

Inspect public TLS certificates with validity, SAN, issuer, fingerprint, protocol, authorization, and expiry evidence.

Michael Olmos

SSL Certificate Inspector — Deep SSL/TLS certificate analysis

perryay/ssl-cert-inspector

Never get caught by an expired or misconfigured certificate. Inspect SSL/TLS certificates for any domain — issuer, subject, validity dates, SANs, key algorithm, chain length, and security ratings. Includes deep inspection for weak ciphers and outdated TLS. Batch analyze up to 20 domains.

Perry AY

TLS-RPT Report Parser

junipr/tls-rpt-report-parser

Audit tls-rpt report parser inputs and return structured findings, evidence rows, and a buyer-ready report for SEO, developer, and operations teams.

junipr

SSL/TLS Certificate Expiry Monitor

gp005/tls-cert-monitor

Bulk-check TLS certificates for any HTTPS hosts: days-to-expiry, expiry alerts, and issuer/SAN/fingerprint change detection. Pure protocol, no scraping.

Geo

SSL Certificate Checker

maximedupre/ssl-certificate-checker

Check SSL/TLS certificates for public domains, URLs, and host:port endpoints. Export expiry, trust, hostname match, issuer, SANs, chain, TLS, cipher, HSTS, HTTPS redirect, and issue data.