Need help with heartbleeder?
Click the “chat” button below for chat support from the developer who created it, or find similar developers for support.


OpenSSL CVE-2014-0160 Heartbleed vulnerability test

449 Stars 97 Forks Other 37 Commits 1 Opened issues

Services available

Need anything else?


Tests your servers for OpenSSL CVE-2014-0160 aka Heartbleed.

WARNING: No guarantees are made about the accuracy of results, and you should verify them independently by checking your OpenSSL build.

Pull requests welcome.


$ heartbleeder
INSECURE - has the heartbeat extension enabled and is vulnerable

Multiple hosts

Multiple hosts may be monitored by setting

flag to a file with newline separated addresses. A web dashboard is available at
by default.

Testing PostgreSQL

Postgres uses OpenSSL in a slightly different way. To test whether a Postgres server is vulnerable, run the following (defaults to port 5432):

$ heartbleeder -pg
SECURE - example:5432 does not have the heartbeat extension enabled


Binaries are available from

Build from source by running

go get -u
, which will put the code in
and a binary at

Requires Go version >= 1.2. On Ubuntu godeb is an easy way of getting the latest version of Go.


The TLS implementation was borrowed from the Go standard library.

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.