Cryptography

PQC Readiness

A structured programme to inventory quantum-vulnerable cryptography and plan migration to NIST post-quantum standards.

Advisory programme

The problem

The challenge

Organisations know post-quantum migration is coming but cannot answer basic questions: where is RSA and elliptic-curve cryptography used, which data needs protection longest, and which vendors are ready?

Current industry pain points

  • No cryptographic inventory
  • Unknown exposure to harvest-now, decrypt-later attacks
  • Vendor dependencies with unclear PQC roadmaps
  • No budgeted, sequenced migration plan

The solution

How it works

A readiness programme combining automated cryptographic discovery, data-lifetime analysis and vendor assessment to produce a prioritised, budgeted migration roadmap.

Decision flow
  1. Discovery (code, infra, network)
  2. Cryptographic bill of materials
  3. Risk scoring
  4. Migration roadmap
  5. Hybrid pilots

In detail

Inside the platform

01

Discovery

Identify cryptographic algorithms, keys, certificates and libraries across code, infrastructure and network traffic.

02

Risk analysis

Assess exposure based on data sensitivity, confidentiality lifetime and system exposure.

03

Roadmap

Sequence migration by risk and dependency, with hybrid deployment as the transition pattern.

04

Pilot

Validate ML-KEM and ML-DSA in representative environments and measure performance impact.

Capabilities

Key capabilities

  • Cryptographic discovery

    Automated and manual inventory.

  • Quantum risk scoring

    Prioritisation by data lifetime and exposure.

  • Vendor assessment

    Readiness analysis of third-party products.

  • Migration planning

    Sequenced, budgeted roadmap.

Trust

Security, integration and outcomes

Security by design

  • Read-only discovery access
  • No private keys extracted
  • Findings encrypted at rest

Integrations

  • Source repositories
  • Certificate managers
  • Cloud KMS
  • Network sensors

Business outcomes

  • A complete cryptographic inventory
  • A prioritised migration roadmap
  • Board-level understanding of quantum risk

Outcomes depend on each organisation’s data, products and processes. We do not publish accuracy or ROI figures without independently verifiable evidence.

FAQ

Frequently asked questions

How long does a readiness assessment take?

It depends on estate size. We agree scope and timeline after an initial scoping discussion.

Start your post-quantum readiness assessment

Let’s discuss it. Tell us what you are working on and an engineer — not a sales script — will respond.