Post-Quantum Readiness Platform

Know your quantum exposure
Fix it before it matters.

Quantinus gives you a complete cryptographic inventory. Every finding scored.

NIST PQC OMB M-23-02 NSA CNSA 2.0 EU NIS2 CCCS
Check which rules apply — 2 minutes Request early access

No professional services. No implementation team. No consulting fees. Results in minutes.

How it works

From first scan to full remediation — end to end.

01 — AGENT DEPLOY
TLS, SSH and certificate files.
Deploy the lightweight Quantinus agent across your environment. No traffic interception. No sensitive data leaves your perimeter. It scans TLS endpoints, including which legacy protocol versions they still accept; the SSH host key a server presents, and the host-key and key exchange algorithms it offers; and certificate files on disk (PEM, DER, PKCS#12).
02 — CLASSIFY
Quantum risk scoring.
Every finding scored for severity and post-quantum risk, and rolled up into a Hygiene grade and a PQ Readiness score. Findings are mapped to the framework requirements in our compliance mapping.
03 — REPORT
Executive, compliance and technical reports.
Three reports from your last scan: an executive summary for your board or CISO, compliance evidence mapping findings to the frameworks they relate to, and technical detail on every finding, with locations.
04 — MIGRATE
Ranked fixes, each with a target.
Findings ranked by severity, each with the target state to move to. For classical key exchange, that target names the ML-KEM hybrid to enable.
Platform

Everything you need to get quantum-ready

Executive dashboard
Board-ready reporting with risk scores, compliance status, and migration progress — all in one view. Share with your CISO or board in one click.
Multi-framework compliance
Findings are checked against the requirements in our framework mapping. The dashboard shows the share of mapped requirements passing, and the compliance evidence report lists each requirement as pass or fail.
Privacy-first architecture
The agent never transmits private keys or plaintext secrets. Only metadata and risk signals leave your environment. Each customer’s data is isolated with row-level security on every dashboard and API read.
Free questionnaire

Which rules actually apply to you?

Four questions, about two minutes. You get a plain-language summary of the requirements that apply to your situation: what each one asks for, what Quantinus covers, what it does not cover, and what is at stake.

No email required to see your result.

Start the questionnaire

Coverage

What Quantinus scans

This list is what the agent does today. Anything not on it, we do not claim.

Network and transport
TLS endpoints: the negotiated protocol version and key exchange, and the certificate chain served
Legacy protocol detection: which of TLS 1.0 and TLS 1.1 an endpoint still accepts, including when it negotiates a modern version with a normal client. The probes can be turned off with --no-legacy-probes where security monitoring flags them.
SSH: the host key the server presents, and the host-key and key exchange algorithms it offers
Certificate files
PEM, DER and PKCS#12 files in directories you point the agent at
The same certificate found in several places is recorded once, with each location listed
What is flagged
SHA-1, MD5 and MD2 certificate signatures
RSA keys under 3072 bits, in certificates and SSH host keys. 2048-bit keys are flagged at medium severity as lacking long-term margin.
DSA keys
Static RSA key exchange
Key exchange without a post-quantum hybrid
Certificates with classical keys (RSA, ECDSA, Ed25519) still valid for more than five years
A note on absence

If the agent does not detect something, that means it was not detected. It does not mean the thing is absent, and we do not report it as such. A server that refuses a probe may still support what we could not confirm.

Not covered today
Operating-system certificate stores
Cloud key stores and secret managers
Databases, backups and storage encryption
Hardware security modules and TPMs
Code signing and CI/CD secrets
Email and messaging keys
Encryption of stored data, and password protection

Some of these are on the roadmap. None of them are in the product today.

Risk classification

Three levels of quantum exposure

Critical
Immediate action required
Assets using RSA-2048 or lower, ECDH/ECDSA on NIST P-256/P-384, or DH key exchange — broken by a cryptographically relevant quantum computer.
RSA-2048ECDH P-256DH-2048DSA
High
Plan migration now
Larger key sizes that provide more runway but are still vulnerable. Systems with long data-sensitivity windows need early planning.
RSA-4096ECDSA P-521AES-128
Monitor
Track and plan
Symmetric algorithms and larger hash functions that are quantum-resistant with doubled key sizes. Monitor for new guidance.
AES-256SHA-384SHA-512

Pricing

Not published yet. Email hello@quantinus.io and we will talk about your situation.

Partner program

Help your clients get quantum-ready. Earn recurring revenue.

Quantinus partners deliver post-quantum cryptography readiness to enterprise clients. You bring the relationships. We bring the platform.

Apply: partners@quantinus.io →

Referral Partner
Referral
Recurring commission · Multi-year
Refer clients, earn recurring commission for the life of the relationship. No certification required. Access to partner portal and sales materials. Ideal for consultants, advisors, and VARs.
Certified Partner
Certified
Recurring commission · Multi-year
Listed on quantinus.io/partners. Deliver services to Quantinus clients. Access to technical documentation, sandbox, and co-marketing. Ideal for MSSPs and cybersecurity consultancies.
Strategic / MSSP
Strategic
By invitation · Custom terms
For large MSSPs and national consultancies with significant enterprise client bases. Custom commercial terms, joint go-to-market, and dedicated support. Contact us to discuss.
Security policy

How we protect your data

Security is not a feature we add — it is the foundation we build on. We practice what we scan.

Data minimization

The agent collects only cryptographic metadata. No private keys, no plaintext secrets, and no sensitive business data ever leave your environment.

Encryption in transit and at rest

TLS 1.3 in transit and AES-256-GCM at rest. We apply the same cryptographic standards we help you achieve.

Vulnerability disclosure

Report vulnerabilities to hello@quantinus.io. We acknowledge within 24 hours and resolve critical issues within 7 days.

Access controls

Role-based access controls with full audit trails. Multi-factor authentication is required for all platform accounts.

Customer data isolation

Each customer’s data is isolated with row-level security on every dashboard and API read. Those reads use a database role that cannot bypass it.

Our own PQ readiness

We are actively migrating our own infrastructure to post-quantum standards — the same ones we help our customers achieve.

Ready to know your
quantum exposure?

Join the early access program. We are onboarding enterprise teams now.
Full environment coverage in hours.

Or email us at hello@quantinus.io

By submitting you agree to our Privacy Policy and Terms of Service.