SSLBoard is useful when you know your main website works but do not know whether the rest of your domain is configured consistently. An old subdomain, an IPv6 address, or a mail server can behave differently from the page you usually visit.
Run a scan
- Open SSLBoard and enter the domain you want to assess, such as
example.com. - Complete the browser verification if prompted and start the scan. You do not need to install software or provide server credentials.
- Watch discovery and inspection progress, then open the completed report.
- Start with the priority findings. Open the affected-host details before deciding which service needs a change.
The free summary provides the score, findings, counts, and example evidence. The full report adds the detailed affected-host lists and exports. See report access and sharing for the difference.
What you will learn
The report brings together deployed certificates, TLS versions, cipher suites, forward secrecy, key profiles, web security headers, DNSSEC, and email-security observations. It also records connection failures, which help explain where the scan could not establish the facts.
You can use it to investigate a domain you operate, prepare work for your hosting provider, or check the public configuration after a migration. It is a point-in-time assessment. It does not prove that an application is free of vulnerabilities or that an organization meets a compliance framework.
Start with one concrete finding
Suppose the report shows an expired certificate for old.example.com while www.example.com is healthy. Check whether the old service is still needed, identify where its TLS connection terminates, and replace the certificate there or retire the service. Retest afterward to confirm what is actually being served.
This is usually more useful than trying to improve every category at once. Reading your report explains how to interpret the evidence and choose a first action.