Command-Line Tools
Free, open-source CLI tools for certificate scanning, PEM manipulation, and SSH key auditing. Cross-platform (Linux, macOS, Windows).
Certificate Scanner
Coming Sooncert-scanner Scan IP ranges and domains for TLS certificates. Extracts expiry, issuer, SANs, key algorithm, and chain completeness. Outputs JSON or CSV for integration with monitoring systems.
Features
- Scan IP ranges (CIDR notation)
- Multi-port scanning (443, 8443, 636, etc.)
- JSON/CSV output
- Parallel scanning (configurable concurrency)
- SNI-aware (multiple certs per IP)
Usage
cert-scanner scan --range 10.0.0.0/24 --ports 443,8443 --output json > results.jsonAvailable soon on GitHub
PEM Toolkit
Coming Soonpem-toolkit Swiss-army knife for PEM files. Convert formats (PEM/DER/PFX/JKS), extract certificates from chains, verify key-cert pairs, inspect certificate details, and assemble chain files.
Features
- PEM ↔ DER ↔ PFX ↔ JKS conversion
- Extract certs from chain files
- Verify key matches certificate
- Inspect certificate details (human-readable)
- Assemble chain in correct order
Usage
pem-toolkit convert --in cert.pfx --out cert.pem --format pem
pem-toolkit verify --cert server.pem --key server.key
pem-toolkit inspect --in cert.pemAvailable soon on GitHub
SSH Key Auditor
Coming Soonssh-key-auditor Scan servers for SSH authorized_keys, identify orphaned keys, check key algorithms and ages, and generate audit reports. Connects via SSH to target hosts.
Features
- Scan authorized_keys across servers
- Identify key owners (from comments)
- Flag weak algorithms (RSA-1024, DSA)
- Detect orphaned keys (no matching user)
- Generate compliance reports (CSV/JSON)
Usage
ssh-key-auditor scan --hosts hosts.txt --user admin --report audit.csv
ssh-key-auditor check --host server.example.com --format jsonAvailable soon on GitHub
Get Notified When Tools Launch
We'll email you when the CLI tools are available for download.
Notify Me