Check it before you trust it. Then go on the record.
Paste a site, a token, or the link someone just DM'd you. We measure it live — the connection, the project behind it, how the token has actually moved — and hand you something you can show to somebody else. Free, no signup, five seconds.
Every check runs from our own server. We never see your data or your traffic — we can't. Nothing here is financial advice.
{{ verdictSentence }}
{{ plainBody }}
Post the card anywhere, or share a link that re-scans live for whoever opens it.
One score, six checks.
You get a number and a word, not a wall of jargon. Underneath it are the things that actually decide whether a site is safe to touch — weighted by how likely each one is to cost you money.
{{ ck.blurb }}
A certificate your browser would reject caps the score no matter how good everything else is. A site can't ship tidy code its way back to "safe". And anything we couldn't measure is left out of the score rather than counted against it — the page tells you which.
$SWEEP is collateral.
The product's only real asset is that a stranger believes the measurement. So the token does one job: it makes a claim cost something. You put it up behind what you say, and you lose it when you are wrong.
Any call can go on The Record for free, and every one of them stays there. But a call with $SWEEP behind it is the only kind that gets ranked — because it is the only kind where being wrong costs the caller something.
Outcomes settle from price data, against thresholds sealed into the call before anyone knew the answer. A rug or a miss slashes the stake, and slashed stake pays for the checks everyone runs free.
Checking anything is free forever, for everyone, signed in or not. Holding thresholds unlock the deeper surface: full subject history, alerts when a verdict changes, and API keys for the build gate.
No yield, no rebase, no reflections, no referral tiers, no "treasury operations" paying holders out of the next buyer. A payout structure that needs new deposits would make every receipt on this site worthless, which is the one thing we are actually selling. Chain and launch details are not final — the contract address appears at the top of this page the moment there is one, and nowhere else.
{{ verdictWord }}
{{ verdictSentence }}
{{ wirePreview }}
{{ cbomText }}
# nginx (OpenSSL 3.5+) ssl_protocols TLSv1.3; ssl_ecdh_curve X25519MLKEM768:X25519:secp256r1;
A CycloneDX 1.6 BOM as a navigable object.
oid: {{ a.oid }}
signature: verified ✓ · detached cosign
{{ cbomText }}
How the measurement works.
we read the actual negotiation — not a banner string. no guesses, no false positives.
{{ pipelineDetail }}
The lattice shortcut explorer.
Drag the "Shor shortcut" vector. In flat space it snaps to target — RSA/ECDH die here. In the lattice, it dead-ends; difficulty explodes with dimension.
ML-KEM-768 — rank-3 module, 256-degree ring ≈ 768-dimensional lattice. (analogy — the real hardness is Module-LWE.)
Harvest now. Decrypt later. The clock already started.
An adversary records your encrypted traffic today and decrypts it when a CRQC exists. Your secrets' shelf life is the only variable.
Fail the build on a quantum-vulnerable handshake.
The same measurement engine as the hero — as a build gate. The product is an API with a website on top.
Priced on hosts monitored, not seats.
The unit of value is a measured host.
What we measure, and what we never touch.
we read handshake parameters, not plaintext — physically, we cannot see your data.