# Custom Vulnerability check to identify TLS 1.2 enabled services

**URL:** <https://discuss.rapid7.com/t/custom-vulnerability-check-to-identify-tls-1-2-enabled-services/57133>\
**Category:** InsightVM\
**Created:** [March 24, 2026, 2:34pm UTC](https://discuss.rapid7.com/t/custom-vulnerability-check-to-identify-tls-1-2-enabled-services/57133 "2026-03-24T14:34:30Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sergey](https://discuss.rapid7.com/user_avatar/discuss.rapid7.com/sergey/32/2317_2.png) [@Sergey](https://discuss.rapid7.com/u/Sergey)\
**Post date:** [March 24, 2026, 2:34pm UTC](https://discuss.rapid7.com/t/custom-vulnerability-check-to-identify-tls-1-2-enabled-services/57133/1 "2026-03-24T14:34:30Z")

</div>

Hi All,

I am looking for some guidance from experts and community about writing custom vulnerability checks.  
As I understood there is support for [custom checks](https://docs.rapid7.com/insightvm/writing-vulnerability-checks/), and your can define in XML validation criteria, but it still remains unclear what is the underlying mechanism that enables custom checks and provide data.

Can I use nmap to test if service supports TLS 1.2 or is there another built-in protocol discovery check that can feed the data to custom check?

Thanks!

---

<div class="post-metadata">

**Author:** ![C.W](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/c/bbe5ce/32.png) [@C.W](https://discuss.rapid7.com/u/C.W)\
**Post date:** [March 31, 2026, 1:17pm UTC](https://discuss.rapid7.com/t/custom-vulnerability-check-to-identify-tls-1-2-enabled-services/57133/2 "2026-03-31T13:17:53Z")

</div>

nmap can check that  
[https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html](https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html)