Old TLS and weak cipher suites turn encryption into false comfort. We check your TLS versions, cipher suites and certificates and show what should be turned off.
Run a free domain scan All checks →We verify which TLS versions your service allows (TLS 1.0/1.1 should be off), which cipher suites are offered, the certificate's validity and chain, and whether the key exchange provides forward secrecy.
TLS 1.0/1.1 and weak cipher suites are known-broken and rejected under PCI DSS. An expiring or misconfigured certificate is both a security hole and an outage when it lapses unexpectedly.
What TLS baseline should I have?
TLS 1.2 and 1.3 on, TLS 1.0/1.1 off, only strong cipher suites with forward secrecy. We give you the exact recommendation.
Does the test affect my users?
No — it's a passive handshake analysis against your public endpoint.
Do you warn before certs expire?
In continuous monitoring, yes — we alert well before renewal is needed.
Run a free scan or order a full Security Assessment — prioritised, not noise.
Run a free domain scan