BCDRPulse

Security scan or deep TLS analysis?

The scan is broad: one grade for the public surface of a site. Deep TLS analysis is narrow and thorough: one area, the transport layer, examined in detail.

Pro

Security scanning

Its own page ›
Business

Deep TLS analysis

Its own page ›

Side by side.

What is comparedSecurity scanningDeep TLS analysis
PlanPro and BusinessBusiness
Looks atSecurity headers, HTTPS enforcement, exposed files, technology disclosure, cookies, email and DNS recordsThe certificate and its chain of trust, six protocol versions, weak cipher suites, known TLS weaknesses and HSTS
Breadth30+ checks across the site's public surfaceOne area, in depth
What it says about TLSThat HTTPS works and is enforcedWhich protocol versions are offered, and which ciphers are weak
GradeA to FA TLS grade of its own
A month100 scans on Pro, 500 on Business100 analyses on Business
How it worksPassive and read-onlyRead-only; a full analysis takes 3 to 5 minutes

Which one?

Choose security scanning when

  • A customer or an auditor has sent a security questionnaire.
  • You want one grade for the whole public surface of a site.
  • You changed headers or hosting and want to confirm nothing slipped.

Choose deep TLS analysis when

  • A review asks about your TLS configuration in detail.
  • You renewed a certificate or changed your TLS settings.
  • You want weak protocols and ciphers named one by one.

Neither is a penetration test: both are automated assessments of what is publicly observable. For any public site, the free Security Headers Checker and SSL Certificate Checker give a quick read.

Start with your own sites.

Monitoring is free for 10 sites. Add the tests when you need them.