Skip to content

Compare

SiteRune vs SSL Labs

· Configuration notes, not a newsroom.

Qualys SSL Labs grades the TLS handshake. SiteRune notes protocol when we can see it and scores HSTS on the document. Not a certificate auditor.

Different layers

SSL Labs is the right tool for cipher suites, chain issues, and protocol support. SiteRune is a document and header crawler. We may surface TLS protocol as a commendation. We do not replace a Qualys scan.

HSTS sits in between

You can get an A on SSL Labs and still fail sec-hsts on SiteRune because the HTML response never sent Strict-Transport-Security. Fix the handshake at the terminator. Fix HSTS in nginx / headers() / the CDN. Then rescan both.

Run it on a live URL

The brief will name your CMS and attach the files. Three guest scans, no card.

https://