New assessment

Point QPen at a hostname, an address or a CIDR block. The scanner negotiates a session, reads the certificate chain, sweeps the exposed service surface and maps every result to the controls an assessor will ask about.

Target

Hostname, address or CIDR block. Results are reproducible: the same target always returns the same report.

Port

Session port for the TLS stages.

Assessment type

TLS reads key exchange, certificate algorithm and protocol version. Web checks headers, cookies, exposed paths and cross origin policy. Network sweeps ports and grabs banners. Full runs all three. Purple team fires six red team actions and scores what the blue team caught.

Past engagements

What each assessment returns

Type	Checks	Typical findings
TLS scan	Key exchange group, certificate signature algorithm, protocol version, harvest now decrypt later exposure	1 to 5
Web scan	Transport security, content policy, frame policy, banner disclosure, administrative paths, cross origin policy, cookie flags	3 to 6
Network scan	Open port inventory, remote access services, service banners, cleartext protocols	2 to 4
Full scan	Every check above, correlated into one report	5 to 10
Purple team	Six red team actions across crypto and web, scored against blue team detection	0 to 6