TLS security scanner for post-quantum readiness
Build an evidence-backed view of the cryptography exposed by your public services. Quantum Risk Assessment records observable TLS and certificate details, explains the risk, and helps teams plan remediation.
What the TLS scanner records
The scanner connects to an authorised hostname and records evidence available from the endpoint: certificate subject and issuer, validity dates, chain details, public-key algorithm and size, protocol support, negotiated cipher information, and the time and depth of the scan.
That evidence helps expose certificates and configurations that depend on classical public-key cryptography. It also identifies present-day TLS hygiene issues that should be handled separately from long-term quantum risk.
From a TLS result to a useful PQC decision
A certificate labelled RSA or ECDSA does not, by itself, determine business priority. The assessment combines technical observations with the sensitivity and expected lifetime of the protected data. Systems handling secrets that must remain confidential for many years may need earlier action because of harvest-now-decrypt-later exposure.
The output is designed to support cryptographic inventory work, vendor conversations, architecture review, hybrid key-exchange testing, and a staged post-quantum migration plan.
What external scanning cannot see
An internet-facing scan cannot find cryptography inside applications, databases, code-signing pipelines, identity systems, hardware, backups, or third-party integrations. It also cannot certify an organisation as quantum safe. Treat the result as a measured starting point and pair it with internal discovery and qualified review.
Designed for repeatable assessments
Security teams can keep evidence and findings together, compare scans over time, prioritise remediation, and generate an executive-ready PDF. MSPs and consultants can use the same structured workflow across client environments while clearly separating observed evidence from self-reported controls.
Start with a domain you are authorised to test
Run a free, temporary scan of a public hostname and capture an initial TLS and PQC baseline.