install

Additional install commands

macOS

Homebrewverified · 100%

brew install tlsx

local Homebrew formula metadata

Linux

Nixverified · 92%

nix profile install nixpkgs#tlsx

nixpkgs package indexes · pkgs/by-name/tl/tlsx/package.nix · source: api.github.com

overview

Package summary

Fast and configurable TLS grabber focused on TLS based data collection

Project links

Commands and aliases

tlsx

history

Project history and usage

tlsx is a ProjectDiscovery command-line TLS data gathering and analysis tool. Its official README describes it as a fast, configurable TLS grabber for collecting and analyzing TLS-based data.

Project history

The project belongs to the ProjectDiscovery security-tooling ecosystem rather than to the older Unix system-administration lineage. The README positions it around practical TLS reconnaissance features: multiple connection modes, certificate fields, TLS version and cipher inspection, JARM and JA3 fingerprints, and misconfiguration checks.

The tool has broadened beyond one-shot host probing. Current official documentation also describes Certificate Transparency log streaming, allowing tlsx to act as a near-real-time feed of newly issued certificates and host metadata.

Adoption history

In package-manager terms, tlsx is still a specialist security package: the supplied source facts list Homebrew and Nix packages, matching its audience of operators who compose recon tools from the shell rather than installing a desktop scanner.

How it is used

The documented usage model is pipeline-friendly. tlsx accepts hosts, IPs, CIDRs, ASNs, URLs, ports, and files; emits text or JSON; and the README explicitly demonstrates piping certificate-derived names into dnsx and httpx for follow-on discovery.

Common package-nerd use is to install it as a small CLI in a security toolbox, feed it asset lists, and use JSON lines with jq or other ProjectDiscovery tools for automation.

Why package nerds care

tlsx matters to package-focused CLI users because it turns TLS inspection into a composable Unix-style command. Its value is less about being a general TLS library and more about packaging certificate, cipher, fingerprint, and CT-log collection behind one installable executable.

Timeline

2022: Official README examples showed tlsx v0.0.1 output and JSON scan records.
2025: GitHub release notes for v1.2.0 documented Certificate Transparency log streaming support.
2026: The batch source facts list tlsx in Homebrew and Nix.

Related projects

ProjectDiscovery dnsx and httpx are shown in the tlsx README as downstream tools for filtering discovered DNS names and probing active web services.
The README acknowledges zcrypto, cfssl, and ciphersuite.info as supporting components for TLS modes and cipher classification.

Sources

https://github.com/projectdiscovery/tlsx#readme
https://github.com/projectdiscovery/tlsx/releases
input.source_facts.package-manager

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

narrow executable package without higher-risk signals

Signals

metadata:no-higher-risk-signals

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`tlsx`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version1.2.2

manager updated

local dataok

upstreamcurrent

latest detectedv1.2.2

https://github.com/projectdiscovery/tlsx

infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package key	brew:tlsx
Version	1.2.2
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/tlsx
Homepage	https://github.com/projectdiscovery/tlsx
Repository	https://github.com/projectdiscovery/tlsx
Upstream docs	https://github.com/projectdiscovery/tlsx#readme
License	MIT
Source archive	https://github.com/projectdiscovery/tlsx/archive/refs/tags/v1.2.2.tar.gz
Build dependencies	go
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	tlsx
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

tlsx

nix profile install nixpkgs#tlsx

normalized package name match
Matched by: Tlsx

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/tl/tlsx/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/tlsx.yml

Used sources

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install tlsx with Homebrew, Nix