cbom

Open-source post-quantum readiness tooling by quantakrypto

Scan codebases for quantum-vulnerable cryptography. Detect RSA, ECDSA, Ed25519, ECDH before Q-Day. CycloneDX CBOM + SARIF output.

GitHub App webhook server for automated PR scanning

VS Code extension: inline cryptographic risk analysis

Marketing site, WASM playground, and interactive tools for Spectra

Cryptographic posture and post-quantum migration triage. Turns a CycloneDX CBOM into a deadline-anchored, risk-ranked migration plan — and says plainly what it could not assess. Offline, deterministic, no network.

Discover and inventory your cryptography and its exposure to quantum attacks.