TLS Cipher Scan

Which TLS versions, cipher suites and key exchange groups a server accepts, in its order of preference, with post-quantum readiness and fixes.

A server's TLS settings decide how well its traffic is protected: old protocol versions and weak cipher suites let an attacker downgrade or later decrypt connections, and without post-quantum key exchange, traffic recorded today could be decrypted by a future quantum computer. This scan sends a series of test handshakes (about 40) and records what the server accepts: each TLS version, the TLS 1.2 cipher suites in the order the server prefers them, the TLS 1.3 suites, and the key exchange groups, including X25519MLKEM768. It never completes a handshake or sends any data. For the certificate itself, use the TLS Certificate Checker.