Tls

Security headers are the front door. TLS is the lock. I built sec-headers to check the headers; now here’s tls-audit to check the lock. It’s a Python CLI that connects to a host and reports what it actually negotiates — not what the config file claims. The certificate, which protocol versions are enabled, whether known-weak ciphers are accepted, and whether anything post-quantum is in play.