# Tenable SSL & TLS - Compliance Dashboard

> SSL/TLS compliance dashboard from Tenable Hexa MCP: flags deprecated protocols, weak ciphers, and certificate issues.

- Type: Skill
- Author: rafansmpj
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Last reviewed: 2026-09-03
- Source repository: https://github.com/rafansmpj/tenable-ssl-tls-compliance-dashboard
- Repo state: not archived
- Last push: 2026-09-02T01:12:50Z
- Stars: 1 (a popularity signal, not a safety signal)
- Forks: 0 (a popularity signal, not a safety signal)
- Open issues: 0
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable, Tenable Hexa AI MCP
- Domains: cryptography-pki
- Tags: ssl-tls, compliance, certificate, dashboard, encryption, tenable, pci-dss
- Date added: 2026-07-27
- Works with the Tenable Hexa AI MCP server: yes
- Compatible platforms: Claude Code, Claude Desktop
- Invocation: `/tenable-ssl-tls-compliance-dashboard`
- Listing page: https://exchange.tenable.com/skills/tenable-ssl-tls-compliance-dashboard
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/skills/tenable-ssl-tls-compliance-dashboard.md

A Claude Code/Desktop skill that connects to your Tenable environment via the Hexa AI MCP and delivers a complete SSL/TLS compliance picture as a standalone HTML dashboard — directly in the conversation. Read-only: no certificates are replaced, no services are restarted, no configuration is modified.

## What it does

Analyzes SSL/TLS configuration across your Tenable environment using eight targeted plugins (56984, 10863, 15901, 42981, 57582, 35291, 86067, 45411). It identifies deprecated protocols (SSLv2, SSLv3, TLS 1.0, TLS 1.1), weak cipher suites (RC4, DES/3DES, NULL, export, anonymous), missing Perfect Forward Secrecy, and certificate issues including expired, self-signed, expiring soon, weak signature/key (SHA-1, MD5, RSA < 2048 bits), and wrong hostname. Crown Jewel assets are surfaced using Tenable tags or ACR scores so remediation can target the highest-impact assets first.

## How it works

The skill orchestrates a multi-step MCP data collection: aggregate finding counts via `workbenches_list_vulnerabilities`, detailed host samples via `workbenches_get_vulnerability_outputs`, Crown Jewel identification via tagging or ACR fallback, and asset enrichment via `tenable_one_search_assets`. Results are rendered into a two-tab standalone HTML dashboard — an Overview tab with summary cards, protocol distribution chart, certificate breakdown donut, and prioritized recommendations; plus an Applicable Assets tab with interactive filters, sortable columns, and per-asset detail drawers.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/skills/tenable-ssl-tls-compliance-dashboard.json. The full index and how to read it: https://exchange.tenable.com/llms.txt