A valid certificate is only one part of a secure HTTPS deployment. The SSLFOR TLS Server Analyzer makes real connections from the backend to a public server on port 443 and reports negotiated TLS information, TLS 1.2 and TLS 1.3 support, the selected cipher, certificate trust, hostname matching, HSTS, HTTP-to-HTTPS redirection and the HTTP version observed by the server probe.
The analyzer blocks private, loopback, link-local and reserved network addresses so the public tool cannot be used as a general internal port scanner. The diagnostic posture score is transparent and based on visible checks; it is an SSLFOR summary, not an SSL Labs grade.
Use the results to identify common deployment gaps such as missing TLS 1.3 support, absent HSTS, a certificate trust problem or an HTTP endpoint that does not redirect visitors to HTTPS.