macOS app · coming soon

TLSProbe

Intercepts your Mac's network traffic and finds connections that accept forged certificates, due to outdated trust roots or misconfiguration, and are open to TLS man-in-the-middle attacks.

Join the private beta

Email contact@rixdata.net to test the private beta.

macOS 14+

What it does

While a test runs, new outbound TCP connections go to a local probe that answers with a certificate for the requested hostname that a correctly validating client must reject.
Three certificates to test with: one signed with the recovered key of eMudhra's revoked EM DV TLS CA - G3B, a self-signed one, and one from an untrusted CA.
Each connection that accepts the certificate is traced to the executable that made it, with its path, code signature and hash.
Tests the command line tools on your PATH, such as curl, git, Homebrew, npm, pip and cloud CLIs, with one click.
A proof line and a Markdown report for each finding, ready for a bug report to the developer.
Nothing is installed: the redirect is removed when you stop the test, quit, or the app crashes.