# How do I find which connections already use hybrid key exchange?

Look at the key-exchange group chosen in each TLS handshake: X25519MLKEM768 means hybrid post-quantum; X25519, secp256r1 or an RSA key exchange mean classical only. For a single server you can test from outside: OpenSSL 3.5 and later, and tools built on it such as curl, can offer the hybrid group and show what the server chooses, and some online TLS checkers report it. Browser developer tools also show the negotiated group for a site you visit. For the whole network a one-off test is not enough, because what matters is what really happens between your clients and servers every day: old clients, appliances and internal applications often fall back to classical groups. NQCI, in preview, shows this per connection on monitored traffic. It is visible on every plan and active from the Pro plan, with the packet-capture sensor switched on for a Linux agent or a SPAN or TAP sensor, because the basic macOS mode does not see handshakes. The result shows where updates have already done the migration and where it is still to do.

FAQ: [Post-quantum cryptography](https://netsenx.com/en/faq/pqc) · https://netsenx.com/en/faq/which-connections-already-use-hybrid-key-exchange

## Read next

- https://netsenx.com/en/encrypted-traffic-analysis
- https://netsenx.com/en/features
- https://netsenx.com/en/blog/2026-10-27_harvest-now-decrypt-later

## Related questions

- [What should a cryptographic inventory include?](https://netsenx.com/en/faq/what-should-a-cryptographic-inventory-include)
- [Does NetSenX protect us against quantum computers?](https://netsenx.com/en/faq/does-netsenx-protect-us-against-quantum-computers)
- [How do we answer an RFP question about post-quantum readiness?](https://netsenx.com/en/faq/how-to-answer-an-rfp-question-on-post-quantum-readiness)
- [What should we ask vendors about post-quantum readiness?](https://netsenx.com/en/faq/what-to-ask-vendors-about-post-quantum-readiness)
- [What is a quantum computer?](https://netsenx.com/en/faq/what-is-a-quantum-computer)