Is your HTTPS being decrypted and re-encrypted by a corporate proxy (SASE/SWG)? This checks your egress against known TLS-inspection vendors — Zscaler, Netskope, Umbrella, Prisma, Forcepoint, Bluecoat and more — scans for proxy-injected headers, and runs a deep JA3/JA4 TLS-fingerprint probe that flags interception even by unknown or on-prem proxies. Plus a padlock check to confirm it yourself.