Responsible use.
SSLConf is for analysing public HTTPS services and certificate material that you are entitled to inspect. Use it responsibly, within the authority you have and with consideration for the systems being contacted.
Last updated: 20 October 2026.
Permitted use
Use the service to inspect your own public endpoints, systems you manage, or targets for which you have clear permission. The tools are intended for configuration review, troubleshooting and operational validation.
Treat every result as point-in-time technical evidence. DNS, CDNs, load balancers and network location can change what the scanner observes. Validate planned production changes in your own environment.
Do not use SSLConf to
Do not scan private, internal or restricted systems; bypass access controls; probe systems without authority; run excessive automation; attempt to degrade availability; or use results to facilitate unauthorised access.
Do not submit credentials, personal data, confidential business data or private keys that you are not authorised to disclose. The Certificate & Key Matcher should be used only when sending the key to this service is an acceptable risk for you.
Rate limits and service safeguards
SSLConf applies input validation, public-address restrictions, timeouts, caching and rate limits to protect the service and third-party endpoints. These controls are not permission to test a target. We may restrict requests that threaten reliability, security or acceptable use.
Do not try to evade these controls or distribute tooling that does. If you need recurring or high-volume checks, use a controlled monitoring process with explicit authorisation from the target owner.
Scope of results
SSLConf is not a penetration test, a complete vulnerability assessment, a certificate-authority audit or a guarantee of browser compatibility. Its grades follow SSLConf's published methodology and are not equivalent to another provider's grade.
You remain responsible for evaluating the result, applying changes safely and meeting the security, contractual and legal obligations relevant to your systems.
Report misuse
Report suspected abuse, a security concern or an issue with these limits to contacto@sslconf.com or through the security contact published in security.txt.