PQC Security

Evaluation

Find out what cryptography you are actually running

Most teams discover their real exposure at inventory time, not at migration time.

This is commercial work, and it is not what the rest of this site is for. The country pages report what regulators have published and recommend no product. This page exists because readers ask where to go next, and the honest answer is the company that funds this site.

Cryptographic inventory (CBOM)

A CycloneDX Cryptographic Bill of Materials of the algorithms, key lengths, certificates and protocols actually in use across your codebase and infrastructure, with the file and line each was found at.

Post-quantum readiness

That inventory scored for quantum vulnerability: which assets depend on RSA or ECC, a realistic migration sequence, and where crypto-agility is missing so a future algorithm change would mean a rewrite rather than a config change.

Mapped to your obligations

Where the findings sit against the rules that actually bind you, using the same primary sources the country pages cite.

Goes to O3 Security, who fund this site. Used only to reply to you.

Not ready for that? The country tracker and deadlines are free and always will be.