FAQ
Why is my grade lower than SSL Labs gives me?
Section titled “Why is my grade lower than SSL Labs gives me?”The two use different rules. devtls’s are published in full on Web TLS grading — for example, TLS 1.0 still enabled costs 25 points and a missing HSTS header 10, which together already take an otherwise perfect server down to a B. Each fix in the report says what to change. Paid plans can run a deep scan to see the SSL Labs grade next to devtls’s.
A big, well-known site gets a C. Is devtls wrong?
Section titled “A big, well-known site gets a C. Is devtls wrong?”Usually not: many large sites, including some CDNs, still accept TLS 1.0 and 1.1 for old clients. That’s a deliberate trade-off on their side, and devtls reports it as it is.
What does “not tested” mean next to TLS 1.0 or 1.1?
Section titled “What does “not tested” mean next to TLS 1.0 or 1.1?”Some legacy protocols can’t be attempted from a modern TLS library at all. When devtls can’t make the attempt, it says not tested instead of guessing disabled, and doesn’t penalize it. A deep scan gives a second opinion from SSL Labs.
Can I scan servers on my private network?
Section titled “Can I scan servers on my private network?”Not with the hosted service: names that resolve to private, loopback, link-local or cloud-metadata addresses are refused, so the scanner can’t be used to probe networks it shouldn’t reach.
Does the mail check log in to my mail server?
Section titled “Does the mail check log in to my mail server?”No. It reads the server’s greeting and capabilities, starts TLS the way a client would, and stops. No username or password is ever sent — it only checks whether the server would accept one before TLS.
How often are my domains re-scanned?
Section titled “How often are my domains re-scanned?”Weekly on Free, daily on Pro, Team and Founder. You can also scan on demand at any time, within your monthly scan allowance.
What counts against my monthly scans?
Section titled “What counts against my monthly scans?”Every scan, whether you started it, a CI job started it, or the schedule did. The counter resets at the start of each calendar month (UTC). Plans lists each plan’s allowance.
What happens to my history when I downgrade?
Section titled “What happens to my history when I downgrade?”Scans older than the new plan’s retention period are no longer kept (30 days on Free, 1 year on Pro, unlimited on Team and Founder).
Is there a command-line tool?
Section titled “Is there a command-line tool?”devtls is used through the dashboard and its API. For CI, see Gate CI on the grade, which needs only curl and jq.