PQC DOMAIN CHECKER
Check any domain's post-quantum readiness
Free, instant, no signup required. Cipherscan checks live TLS handshakes and shows you which protocols still rely on classical cryptography. Enter any domain to see a partial real result immediately, then create a free account to unlock the full per-host report, scan up to five domains automatically, and track results over time.
ciphersound.com/pqc-checker
Probing TLS handshake…
We only check public TLS handshake data. No agent is installed on your infrastructure.
About this free check
It inspects the public TLS handshake for the domain you enter and reports whether each negotiated algorithm is an approved post-quantum algorithm or a classical one. No credentials or private access are required.
A free account lets you scan up to 5 domains automatically, no install required. You can also download the Cipherscan tool to scan your own private network, then upload those results into the same dashboard.
No. This check only reads publicly available handshake data for the domain you provide. Nothing is installed unless you choose to download the Cipherscan tool for private network scanning later.
A host is marked ready when it negotiates a NIST-standardized post-quantum algorithm, such as ML-KEM for key exchange. Anything still negotiating a classical algorithm like RSA or ECDHE is flagged as exposed.
The free check covers one domain at a time. A free account lets you scan up to 5 domains automatically and keep track of them going forward.