FLAGSHIP PRODUCT PROFILE · CRYPTOGRAPHIC DISCOVERY & GOVERNANCE

QuantumSafe Discovery Studio
Pilot product

Discover cryptographic exposure from packet captures, certificates, software dependencies and declared CBOM data—then turn findings into an owned migration backlog.

CUSTOMER PROBLEM

Organizations cannot prioritize PQC migration when algorithm use is hidden inside networks, certificate stores, code, appliances and supplier declarations.

Discover cryptographic exposure from packet captures, certificates, software dependencies and declared CBOM data—then turn findings into an owned migration backlog.

OPERATING WORKFLOW

QuantumSafe Discovery Studio: from source input to governed outcome.

Every step names a product responsibility rather than a generic security box.

01

Ingest source evidence

Ingest PCAP/PCAPNG, certificates, manifests and CBOM

02

Normalize trusted facts

Normalize protocols, algorithms, keys and certificate facts

03

Correlate inventory

Correlate observed use with declared inventory

04

Classify quantum risk

Classify classical-secure / quantum-vulnerable / quantum-ready

05

Assign ownership

Assign owner, data lifetime and migration dependency

06

Publish governed outcome

Publish risk heatmap, exceptions and remediation waves

PRODUCT ARCHITECTURE

From raw cryptographic signals to a governed migration portfolio.

Three discovery engines run in parallel, then correlation, risk scoring and accountable remediation turn observations into governed action.

SOURCE INPUTS
PCAP / PCAPNGCertificatesSource codeCBOM / SBOM
Discovery & extraction layer
01

Network Capture Analyzer

Extracts endpoints, protocols and cryptographic handshakes from approved PCAP/PCAPNG captures without decrypting protected traffic.

PASSIVE ANALYSIS
02

Certificate & Trust Scanner

Inventories certificate chains, algorithms, validity, SAN/EKU facts and trust-store placement across approved sources.

TRUST INVENTORY
03

Software Crypto Scanner

Maps libraries, providers, packages and configuration references into a versioned cryptographic bill of materials.

SOFTWARE INSPECTION
04

Observed-vs-Declared Correlator

Compares operational observations with declared inventories and highlights unsupported, missing or stale cryptographic facts.

EVIDENCE CORRELATION
05

Quantum Risk Scoring

Prioritizes findings using secrecy horizon, verification lifetime, replacement lead time and external dependency.

POLICY ENGINE
06

Migration Portfolio Board

Assigns owners, remediation waves, exception dates, evidence requirements and closure criteria.

GOVERNED OUTPUT
GOVERNED OUTPUTS
Crypto inventoryExposure heatmapExceptionsRemediation waves
INTERFACES & PROFILES
  • PCAP/PCAPNG
  • X.509/PEM/DER
  • CycloneDX / SPDX extensions
  • CSV/JSON import-export
  • REST collector API
  • PDF/CSV executive reports
USE CASES
  • Enterprise crypto inventory
  • PCAP-based discovery workshop
  • Supplier CBOM validation
  • PQC migration portfolio governance

PRODUCT READINESS PASSPORT

Decision-grade facts before product evaluation.

Reference collector workflow, browser-local preview, normalized finding schema and governed report model.

Public profile ID
QS-DS-2026.07
Website profile release
2026.07 / v8.0
Current maturity
Controlled Pilot
Deployable scope
On-premises collector, isolated analysis workspace or private cloud project deployment.
Interactive demo
Available — PCAP metadata and inventory workflow preview.
Product manual
Available — profile-specific manual.
API publication
Reference API published for ingestion, jobs, findings and reports.
Test corpus
Sample PCAP, certificate and CBOM corpus with expected findings.
Compatibility
Input-format and parser manifest published; project parser coverage must be confirmed.
Independent assessment
Independent security assessment is not yet published.
Support model
Named pilot owner, bounded data set and controlled support window.
Commercial route
Controlled enterprise evaluation; no general-availability claim.
Next release gateRepeatable parser coverage, customer pilot evidence, privacy review and independent assessment.

PRODUCT BOUNDARIES

What the public profile does—and does not—claim.

These boundaries preserve accuracy while keeping the product value visible.

RELATED PLATFORM MODULES

Deep technical profiles behind this flagship product.

EVALUATE

QuantumSafe Discovery Studio

Use the local demo, review the manual and define a versioned pilot before any production claim.