Try it on your own estate.
A workspace of your own: run scans, build a cryptographic inventory, see your harvest‑now‑decrypt‑later exposure and generate the evidence your auditor asks for. Free, like everything else here — no card, no call, and nothing to upgrade to.
Before you fill anything in
If you only want to know what your public endpoint negotiates today, you do not need an account at all. The free readiness check answers that in about fifteen seconds, keeps a permanent record you can link to, and gives you a badge for your README. Start there; come back here when you want your whole estate rather than one endpoint.
What a trial includes
A workspace nobody else can see, with your own users, API keys and retention settings. Tenant isolation is enforced by the database itself, not only by the application — see security.
Repository, TLS endpoint, certificate and configuration scanning against targets you authorize, producing the full inventory and a CycloneDX CBOM. There is no reduced version of the product: this is the product.
Findings carry what was observed, how it was classified, and against which standard — FIPS 203/204/205, NIST and CNSA 2.0 deadlines. A model is labelled as a model.
Your workspace has API and scan rate limits. They exist because this is a free service run on finite capacity — not because a larger plan is being withheld, since there is no paid tier. Every API response carries X‑RateLimit‑Limit and X‑RateLimit‑Remaining so you can see where you stand without guessing, and a refusal says what the limit was and when it resets. If you need more for a genuine evaluation, ask — it is a conversation, not an upsell.
What happens next
We email you a single‑use link. Open it, choose a password, and your workspace is ready. No card, no call, no waiting for a reply.
An account here can scan hosts, so it scans only domains you've shown you control: add your domain under Domains, publish the DNS record it gives you, and everything under that domain is yours to scan. That check is what keeps this from being a reconnaissance service pointed at other people's systems.
Scanning targets you do not own or have written permission to test is prohibited, and the same rule applies inside a trial as outside it. See the terms and the acceptable‑use policy.