QRAMM provides a structured, evidence-based approach to assess and improve your organization's readiness for post-quantum cryptography migration.
Choose Your Path
Whether you're building the business case, implementing controls, or mapping to compliance frameworks, QRAMM has you covered.
Build the business case for quantum readiness with executive briefings and ROI analysis.
Explore Resources →Get hands-on implementation guides, cryptographic inventory tools, and migration checklists.
Explore Resources →Map QRAMM to NIST, ISO 27001, CMMC, FedRAMP, and other regulatory frameworks.
Explore Resources →The Quantum Timeline
Quantum computers capable of breaking current encryption are approaching. The time to prepare is now.
The Framework
QRAMM provides comprehensive coverage across all aspects of cryptographic modernization.
Discover, catalog, and understand all cryptographic assets across your organization.
Establish leadership commitment and systematic risk management for quantum threats.
Implement quantum-safe data protection across all data states.
Execute quantum-safe technology deployment with minimal business disruption.
The QRAMM Excel Toolkit provides everything you need to assess, score, and report on your organization's quantum readiness.
Open Source Tools
Production-ready open source tools to help organizations discover, assess, and migrate their cryptographic infrastructure.
Cryptographic Discovery Scanner
Scan codebases for cryptographic vulnerabilities and quantum-risk algorithms. Supports 50+ detection patterns, multiple output formats (SARIF, CBOM, JSON), and remote Git repository scanning.
TLS/SSL Configuration Analysis
Analyze TLS configurations, cipher suites, and certificate chains for quantum vulnerabilities. CNSA 2.0 compliance tracking and CBOM generation.
Dependency Crypto Analyzer
Analyze dependencies for cryptographic usage. Identify quantum-vulnerable algorithms in your npm, pip, Go, and Maven packages.
PQC Recommendation Engine
"What post-quantum crypto should I use?" Get natural language recommendations for NIST algorithms with sector-specific guidance and SNDL threat assessment.
Resource Library
Download practical resources to accelerate your quantum readiness journey.
QRAMM is developed and maintained by CyberSecurity NonProfit (CSNP), a 501(c)(3) organization dedicated to advancing cybersecurity education and resources.
