TLS · Certificates · Post-Quantum · Headers
– Post-Quantum TLS & Security Header Checker
Is your site quantum-ready? Scan TLS, certificates and headers in seconds.
Is your HTTPS ready for quantum computers?
One scan. Four checks. One grade from A+ to F. Free and open source.
TLS versions
TLS 1.0 to 1.3. Old versions get flagged.
Post-quantum ML-KEM
Does your server speak X25519MLKEM768? Find out in seconds.
SSL certificate
Issuer, expiry, key strength, trust. Expiring soon? You'll know.
Security headers
HSTS, CSP, X-Frame-Options, X-Content-Type-Options. Protected, weak or missing.
FAQ
What is post-quantum TLS?
Encryption quantum computers can't break. The standard is X25519MLKEM768: classic X25519 plus ML-KEM-768 (NIST FIPS 203).
Why care now?
Attackers save encrypted traffic today and crack it when quantum computers arrive. Chrome, Firefox and Cloudflare already use ML-KEM. Your server should too.
Are TLS 1.0 and 1.1 still safe?
No. Dead since 2021 (RFC 8996). Turn them off, or your grade stops at B.
Which security headers matter?
HSTS, CSP, X-Frame-Options and X-Content-Type-Options. Missing or weak? QScan shows you.
How do I get an A+?
TLS 1.3, no old TLS, a valid certificate, strong HSTS and all four headers in place. ML-KEM earns a bonus. A bad certificate is an instant F.
Is it safe? Is anything stored?
Yes, it's safe: a scan looks like a normal visit. Nothing is stored. Only scan sites you own or may test.
Open source on GitHub