Key exchange
Detects quantum-vulnerable key exchange and whether your endpoint supports PQC hybrid key exchange.
Free PQC Scanner: Is Your TLS Ready for the Quantum Era?
A free post-quantum cryptography readiness scanner. Check whether your TLS is exposed to quantum attacks and estimate your Harvest Now, Decrypt Later risk, with no signup required.
What the PQC scanner checks
Signatures and certificates
Inspects the signature and authentication algorithms and the certificate chain for quantum exposure.
Symmetric encryption
Reviews the symmetric cipher suite negotiated by your TLS endpoint.
Harvest Now, Decrypt Later exposure
Estimates the risk that traffic recorded today could be decrypted once quantum computers arrive.
Frequently asked questions
What is post-quantum cryptography?
Post-quantum cryptography (PQC) is a set of algorithms designed to resist quantum computers. Public-key algorithms like RSA and ECDSA will eventually be broken by them. NIST standardized the first PQC algorithms, ML-KEM and ML-DSA, in FIPS 203 and FIPS 204.
What is Harvest Now, Decrypt Later?
HNDL is a threat model where an attacker records encrypted traffic today to decrypt it once quantum computers are available. Long-lived data such as medical, financial, and state records is most at risk.
Is the PQC scanner free?
Yes. It is free with no signup, no API key, and no rate limiting. Scan any domain instantly.
What does it check?
Key exchange, signature and authentication algorithms, symmetric encryption, the certificate chain, PQC hybrid support, and your Harvest Now, Decrypt Later exposure, with remediation referencing NIST FIPS 203 and 204.