What it detects
A TLS error (alert) during the handshake.
Why it fires
Mostly cert mismatch or version-negotiation failure; at volume, scanning.
Worst case
TLS scanning
Matching signatures
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.