Automated scanners and analyzers to help you discover cryptographic assets and assess quantum readiness across your organization
Discover and inventory cryptographic assets in your codebase. CryptoScan scans source code, configurations, and dependencies to identify cryptographic implementations vulnerable to quantum attacks.
Analyze TLS/SSL configurations across your infrastructure for quantum readiness. Evaluates cipher suites, protocols, and certificates against CNSA 2.0 compliance timelines.
Identify quantum-vulnerable cryptographic algorithms hiding in your software dependencies. Analyzes Go, npm, Python, and Maven packages for cryptographic usage and quantum risk exposure.
Enterprise cryptography as a service. CryptoServe provides a unified API for encryption, signatures, and key management with built-in support for NIST post-quantum algorithms (ML-KEM, ML-DSA, SLH-DSA).
"What post-quantum crypto should I use?" Finally, there's a tool for that. Get natural language recommendations for NIST algorithms with sector-specific guidance and SNDL threat assessment.
Invisible provenance capture for quantum computing experiments. One import for complete reproducibility with zero code changes. Automatically captures environment, circuit, transpilation, hardware, and results.
Choose the right tool based on your assessment needs
| Feature | CryptoScan | TLS Analyzer | CryptoDeps | CryptoServe | PQC-Bench | QBOM |
|---|---|---|---|---|---|---|
| Primary Use | Source code and configuration scanning | Network endpoint and certificate analysis | Dependency and package scanning | Cryptography API service | PQC algorithm recommendations | Quantum experiment reproducibility |
| Scan Target | Codebases, repositories, config files | TLS endpoints, SSL certificates | Go, npm, Python, Maven dependencies | Application integration (REST API) | Natural language queries, use cases | Qiskit, Cirq, PennyLane experiments |
| Output Formats | SARIF, CycloneDX CBOM, JSON, CSV | HTML reports, CycloneDX CBOM, JSON | SARIF, CycloneDX CBOM, JSON | JSON API, CBOM, Audit logs | CLI output, sector guides | JSON, CycloneDX, SPDX, YAML |
| CI/CD Integration | GitHub Actions, GitLab CI, Jenkins | Any CI/CD pipeline | GitHub Actions, any CI/CD pipeline | REST API, Python SDK | CLI tool, scriptable | Python import hook, CLI |
| Compliance Mapping | NIST PQC, CNSA 2.0 | CNSA 2.0 timelines | NIST PQC, quantum risk levels | FIPS 140-2/3, NIST PQC (FIPS 203/204/205) | CNSA 2.0, FIPS 140-3, SNDL threat model | Reproducibility scoring, provenance capture |
Combine these automated tools with the QRAMM Assessment Toolkit for a comprehensive organizational evaluation.