What it does
The PQC Status scanner performs standard TLS handshakes on port 443 (or 8443) and at most two HTTP requests for the home page, one over HTTPS and one over plain HTTP. It never tries to log in, never sends attack payloads and never follows links. A full scan uses around twenty short connections, at most four in parallel.
How to recognize it
HTTP requests carry the user agent pqcstatus-scanner/0.1 (+https://pqcstatus.com/pages/scanner/). TLS handshakes cannot carry a user agent; they come from the same servers at the same time.
Why your domain was scanned
- Someone entered your domain in our free scanner. Results are cached for an hour, so repeated requests do not reach your server.
- Or your domain is part of our post-quantum adoption observatory, which measures public websites by sector at most once a month. Only aggregated statistics are published; results for individual domains are never published.
Opt out
To exclude your domain from observatory scans, e-mail optout@pqcstatus.com from an address at that domain, or ask us for a DNS TXT record to add. We confirm within five business days and never scan the domain again for the observatory.