Quickstart

1. Create an account. Open devtls.fleeq.net and sign up with your email and a password. devtls sends a verification email: click the link in it before you add domains — scanning waits for a verified address.

   Prefer not to use a password? Choose the email me a link option on the sign-in page and devtls sends a one-time sign-in link instead.

2. Choose a plan. New organizations pick a plan before their first scan. Free is enough to follow this guide: 3 domains and 30 scans a month. You can upgrade at any time.

3. Add a domain. In the dashboard, add the name of a site you run, for example example.com. The port defaults to 443; write example.com:8443 (or pick the port) for anything else. A pasted URL such as https://example.com/login works too: devtls keeps the host and the port.

   Give it a label like prod or staging if you’ll track several.

4. Scan it. Start a scan from the domain’s row. Scans are queued and usually finish in a few seconds; the page updates on its own.

5. Read the report. At the top: the grade (A+ to F), the score (0–100) and a one-line summary. Below:

   • Protocols — which TLS versions the server accepts. Not tested means the probe couldn’t try that version from our side; it never counts against you.
   • Cipher — the suite your server picked, and whether it’s strong.
   • Certificate — who issued it, whether it’s trusted and matches the name, and how many days it has left.
   • HSTS — whether the header is set, its max-age, and includeSubDomains/preload.
   • Fixes — each problem with its severity and how to fix it, most serious first.

6. Fix, then scan again. Apply the top fix (often disable TLS 1.0 and 1.1 or add an HSTS header), scan again, and watch the score move. Every scan is kept, so the domain’s history shows the change.

Next steps

• devtls re-scans every domain automatically — weekly on Free, daily on paid plans — so you don’t have to come back to keep the history current. See Scans & history.
• Check your mail server and its DNS records with a mail target.
• Get told when a grade drops or a certificate is about to expire: Alerts & webhooks.
• Fail a deploy when the grade slips: Gate CI on the grade.