ImmuniWeb offers free tool to test quantum resilience of TLS stacks

Help Net Security
Friday, September 19, 2025

• 587
• More
• 1

Governments and agencies, including the European Commission, the UK National Cyber Security Center and the US Department of Homeland Security, have issued frameworks urging immediate planning for PQC migration.

“Many large organizations around the globe still seriously underestimate the risks of quantum attacks. First, with the Harvest-Now, Decrypt-Later attacks – already being deployed by both organized cybercrime and nation-state hackers, your data may already be at risk of a guaranteed compromise in the near future,” said Dr. Ilia Kolochenko, Chief Architect & CEO at ImmuniWeb.

“Second, although powerful quantum computers will quite unlikely become readily available to cyber-threat actors upon their creation, many vendors and organizations are totally unprepared for a rapid migration to post-quantum cryptography. Worse, some devices and business-critical systems simply do not support PQC and shall be replaced,” Dr. Kolochenko continued.

He also pointed to ImmuniWeb’s large-scale testing data: “According to ImmuniWeb’s statistics, based on over 100,000,000 tested SSL/TLS servers, millions of servers around the globe still rely on the SSLv3 protocol, which has been deprecated for over a decade. This is a telling illustration that PQC migration will likely take even longer. Therefore, it is dispositive to commence your PQC migration planning and implementation now.”

“We are delighted to offer a simple and efficient solution to organizations of all sizes to reliably verify their PQC preparedness with our free online SSL/TLS testing tool. It can be accessed either online with a user-friendly web interface or via an API for DevSecOps and CI/CD automation,” Dr. Kolochenko added.

ImmuniWeb also recently added a feature to check websites for protection against AI bots, including detection of anti-bot systems, firewalls, and “robots.txt” configuration. The tool helps organizations guard against unauthorized scraping by AI companies and data-harvesting bots. Read Full Article