How it works
From inventory to a signed plan in four steps.
1. Inventory
Scan X.509 certificates, TLS/SSH configurations, keys and legacy protocols across your infrastructure.
2. Risk classification
Every asset is flagged as Shor-vulnerable or resistant, including public keys exposed on-chain and zero-knowledge proof systems.
3. Migration plan
The Migration Optimizer ranks assets by exposure and effort and recommends ML-KEM, ML-DSA or SLH-DSA.
4. Continuous integration
CBOM (CycloneDX) export plus DefectDojo and CI integration to track the migration.
Capabilities
- Cryptographic inventory (X.509, TLS/SSH, keys, legacy protocols)
- Shor-vulnerability flagging
- Detection of public keys exposed on blockchains
- Probabilistic CRQC arrival model (ranges with sources)
- Migration Optimizer to ML-DSA / ML-KEM / SLH-DSA
- CBOM (CycloneDX) export
- DefectDojo integration
- ZK proof system classification (in development)