Banks, insurers, health, public sector
The keys and certificates you run today are what a quantum computer breaks. AssessQu is the system of record for the cryptography you run, not a scan you run once.
The day a quantum computer arrives is not your deadline. Your deadline is two numbers you control, how long your data must stay secret plus how long migration takes. Weigh them against the one number you do not control.
Start today and your exposure runs to 2040.
Five years past 2035, the year every published roadmap says done.
These two numbers are yours. Change them.
Deadlines from our own research: 77 deadlines across 20 jurisdictions, 40 of them already in force.
Public-key cryptography secures your connections and your signatures, and that is what a quantum computer breaks. Symmetric encryption survives at adequate key length, which is why AES-256 is the standard answer and AES-128 is not. The replacements are already standardised: NIST finalised FIPS 203, FIPS 204 and FIPS 205 in August 2024, so there is no standard left to wait for.
Under DORA, financial entities must already keep cryptographic controls current against developments in cryptanalysis, under Article 9(2) with RTS (EU) 2024/1774 Article 6 and Recital 9, and hold a register of certificates and certificate-storing devices under Article 7(4) of the same RTS. The EU coordinated roadmap is a Recommendation to Member States: national roadmaps by 31 December 2026, high-risk use cases by end 2030, the remainder by 2035.
The EU, the US under CNSA 2.0, and Canada all expect a path to post-quantum from the firms they work with.
Score your own readiness, see which deadlines actually bind you, read how migrations really break, and check when the threat lands. Four tools, open to anyone, with the primary source behind every number.
Open any of these now
We map what you actually run, then write the plan against it: your team, your technical debt, your vendors, and the regulation you answer to. One document a board can act on, and one sequence your engineers can execute.
This is the platform, and it is how you get everything above. It goes live in your stack and stays current between audits: discovery, crypto inventory, a swap lab, framework mapping, every activity on the roadmap tracked in one place, and a sealed record your own auditor re-checks offline.
Readiness is the floor. Past it, we test quantum against your own classical baseline and tell you, straight, where it pays and where it does not. No advantage theatre.
There is no separate product to buy. The platform is stage three, and it is one system of record rather than a scan you run once. Every screen below is the running product on a real banking estate, with the institutions anonymised.
Stage three is guided today. The system of record goes live in your stack with us alongside you, and hosting and connectors are on the committed path.
What is in scope, how much is exposed under your own time assumption, and the two clocks: what is being recorded now to be read later, and what could be forged at break time.
The split by quantum status against the algorithms you actually run most. On this estate, none of it is safe yet and RSA carries the majority.
Each primitive plotted by how long its data must stay secret against how long its swap takes. Anything past the diagonal protects data for longer than the time you have, and the worst are ranked beside it.
Where the migration actually is, with the asset scope of each phase read from the live estate rather than typed into a slide.
Public-key everywhere, DORA in force, and a supervisor who will ask.
Long-lived policies and claims data that must stay confidential for decades.
Patient records with a shelf life measured in lifetimes.
Card, settlement, and signing keys at the center of trust.
National roadmaps and citizen data under a hard timeline.
Grid, network, and identity systems that cannot be re-keyed overnight.
Getting your cryptography quantum-safe is the floor. The reason we can take you past it is that quantum is the work we do across the whole field.
Bring a real problem: too much data, slow decisions, portfolio choices. We test quantum optimization against your own classical baseline. If it wins, you see by how much. If it loses, you see that too. No advantage theatre.
Talk to usBring us the problem you actually have and we will tell you, straight, whether quantum helps.
Part of a group with deep expertise across cryptography, quantum technologies, and the fields around them.
First contact
You do not need an inventory before you get in touch. Tell us what is prompting this, and we come back with what we would look at first.
AssessQu