NIST IR 8547 · deprecated 2030 · disallowed 2035

How far is your TLS estate from post-quantum?

Enter a hostname. We read the live TLS handshake — key exchange groups, certificate chain, signature algorithms, HSTS and CT — and grade it against the 2030 / 2035 deadlines. No account, no agent, nothing installed.

Scan

Passive handshake only · nothing is stored · rate-limited per source

{{ grade }}{{ score }} / 100

Findings, CBOM excerpt and a dated migration checklist against NIST IR 8547 and CNSA 2.0. Sent once; we do not add you to a list.

Generate report

Internal PKI, S/MIME, code signing, VPN IKE proposals and HSM inventories are not visible from a public handshake — and are usually where the long-lived RSA lives. A cryptographic bill of materials covers them. See the Crypto practice →