TLS Version Checker

A practical reference for teams that need to verify which TLS protocol versions a host supports.

TLS Version Checker from Sandglass helps you verify which TLS protocol versions a host supports. Use the result to decide what to monitor continuously.

When to reach for this tool

Reach for this when you need to verify which TLS protocol versions a host supports during setup, debugging, or an incident review. A one-off check is useful for diagnosis, but production systems need continuous monitoring once the immediate question is answered.

  • Legacy TLS versions are a compliance and security risk.
  • Hardening can break older clients, so verify before disabling.
  • Protocol support is separate from certificate validity.

From one-off check to continuous monitor

Use the TLS version result to catch outdated protocol support during hardening work, then keep monitoring certificate validity on that host continuously.

  • Recreate the same check in Sandglass on an interval so the next change is caught without re-running the lookup.
  • Send failures to email, a Slack webhook channel, or a generic webhook owned by whoever fixes the problem.
  • Track the result over time instead of treating one manual reading as the final answer.

Why a lookup is not monitoring

Supporting an old TLS version is a slow-moving risk, not an instant outage. Catch it during a review, but do not confuse a protocol check with ongoing availability monitoring.

Use this tool well

Step 1: Run the check and read the result

Use the output to confirm the current state, and treat anything surprising as a starting point for diagnosis rather than a verdict.

Step 2: Define what healthy means

Write down which results count as healthy, degraded, or failed before you automate anything.

Step 3: Promote it to a continuous monitor

Recreate the same check in Sandglass on an interval so the next change is caught automatically.

Step 4: Route the alert to an owner

Send failures to email, a Slack webhook channel, or a generic webhook owned by whoever will fix them.

Frequently Asked Questions

Want to monitor this automatically? Start free.

Start free

Free plan, no credit card required.