May 2026
NIST Finalizes First PQC Standards
ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) finalized for immediate adoption. NIST states these "can and should be put into use now."
Read moreGenerate your free cryptographic BOM in minutes. Our AI analyzes your infrastructure against 4 global frameworks — NIST (USA), EU CS, China GB/T, Japan CRYPTREC — delivering tailored updates, deadline alerts, and remediation roadmaps for your business.
HARVEST NOW, DECRYPT LATER — THE CLOCK IS TICKING
Adversaries are collecting your encrypted data right now, storing it until quantum computers can break today's encryption. Every TLS session, VPN tunnel, and database backup crossing a public network is being harvested. The migration window closes around 2035 — but the first regulatory deadlines hit January 2027. Every month of delay is more data permanently exposed.
Four global regulatory deadlines are converging. Organizations that wait will face rushed migrations, compliance penalties, and audit failures. Q-Readiness gives you the open-source tooling and AI analysis to act now — on your terms, in your environment.
Every scanner is inspectable on GitHub. No proprietary binaries, no vendor lock-in. You can verify exactly what runs on your infrastructure — or run it yourself.
Scans execute locally. Nothing phones home. Before any upload, our AI shows you exactly what it found and asks for your explicit approval. Air-gapped deployment available.
Claude Code cross-references findings across all 14 tools, flags confirmations and contradictions, and explains every conclusion. Board-ready, auditor-ready analysis — not a black-box score.
Five infrastructure layers. Fourteen open-source tools. One free scan per section. Your dashboard unlocks as you scan.
Scans TLS ciphers, SSH host keys, VPN tunnels, and network handshakes for quantum-vulnerable encryption.
Scans source code dependencies, third-party libraries, and container images for weak hashing and signing algorithms.
Scans cloud IAM roles, KMS keys, hardware security modules, and firmware signatures.
Scans databases, object storage, and backup archives for data-at-rest encryption standards.
Scans certificate authorities, intermediate certs, OCSP responders, and key rotation policies.
Every engagement includes portal access to your live readiness dashboard — real-time scores, prioritized findings, and actionable remediation steps.
Tell us your industry, region, and infrastructure. Takes 2 minutes. Tailors your BOM and future alerts.
Our agent orchestrates 14 open-source scanners across your selected sections. Results in minutes.
Visualize gaps against 4 global standards. Pro+ users get email deadline alerts and tailored newsletter.
Start free. Upgrade when you need more scope.
Need air-gapped or on-premise deployment? Contact us for a Custom quote.
Live countdown to critical PQC migration deadlines. Organizations that begin today gain a 12–18 month advantage in vendor negotiations and regulatory positioning.
Next NIST Standards
FN-DSA (FIPS 206) expected to finalize. Additional signature and KEM schemes for specialized use cases including lightweight IoT and zero-trust architectures.
Enterprise PQC Window
Banks and regulated enterprises begin mandatory migration. Regulatory pressure from OCC, ECB, and MAS expected to align with this window.
Defense Systems Deadline
Government PQC compliance for National Security Systems. CNSA 2.0 mandates in full effect. CRQC considered probable by intelligence assessments.
CNSA 2.0 Compliance
All national security systems fully migrated to PQC-approved algorithms. Current PKI infrastructure considered broken by this point. Harvested data at risk.
The nearest deadline is June 1, 2027. Start your free assessment today — generate your BOM in minutes.
Curated updates on PQC standards, regulatory timelines, and quantum technology milestones. Structured intelligence for decision-makers.
ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) finalized for immediate adoption. NIST states these "can and should be put into use now."
Read moreCNSA 2.0 timelines established for national security systems. NSA does not recommend QKD for National Security Systems due to hardware and integration limitations.
Read moreBooz Allen, Palo Alto Networks, and other major vendors post dedicated PQC roles as cryptographic inventory becomes a formal product category with dedicated budget.
Read moreThree-class framework helps enterprises evaluate when quantum networking is relevant vs. premature, covering QKD, networked sensors, and entanglement distribution.
Read moreProfessor of Applied Quantum Computing at Universidad de Buenos Aires, and a team of cryptographers and security engineers.
Tell us about your organization and we will prepare a tailored quantum readiness assessment proposal. No pitch. No deck.
Cryptographic inventory, risk classification, vendor assessment, and migration roadmap aligned to NIST standards.
Book a scoping call →Prototype hybrid or PQC-ready flows for one bounded protocol or application surface with performance testing.
Technical follow-on →Determine whether QKD or quantum networking is relevant to your specific environment and threat model.
Specialized add-on →Technical enablement for engineering and security teams using NetSquid and quantum network simulators.
Team workshop →