1. Scan the public endpoint
Check visible TLS posture, security headers, downgrade exposure and post-quantum readiness signals before deeper discovery work.
Assessment sequence
Turn a Free Scan Into a Practical PQC Assessment
The free scan is not the whole assessment. It is the fastest way to capture the first visible evidence and decide whether the next step is configuration cleanup, inventory work or a migration pilot.
2. Save the evidence
Create a free account so the result is not lost. Keep the domain, score and visible findings as the first assessment record.
3. Map systems and data lifetime
Use the scan as a starting point, then identify APIs, certificates, signing systems, suppliers and long-lived sensitive data.
4. Prioritise migration work
Rank fixes and pilots across TLS 1.3, hybrid key exchange, signatures, supplier evidence and regulated data stores.
Free evidence
What You Can Capture Before Paying for an Audit
Most organisations do not need to start with a large consulting project. A public scan can expose basic transport-security gaps and create a saved record that justifies the next step.
TLS version and downgrade exposure
Security headers that affect public endpoint risk
Visible post-quantum or hybrid key exchange signals
Certificate and public-domain configuration context
A saved result that can be rescanned after fixes
A practical route into badge evidence or a deeper assessment
Choose the Right Assessment Depth
Free saved scan
Public website TLS, security headers, visible readiness signals and a saved result.
Best for: Teams that need a quick first record and a reason to begin cleanup.
Readiness assessment
Public scan evidence plus inventory, data-lifetime mapping, supplier questions and migration prioritisation.
Best for: CTOs, security leads and regulated teams preparing a PQC roadmap.
Implementation engagement
Hands-on TLS, API, signature or data-protection migration work with documented evidence.
Best for: Teams ready to pilot or deploy post-quantum controls.
Start With the Free Account Flow
Enter an email and optional domain. The sign-in code creates the account and can send you straight to the scanner with the domain ready to check.
That gives you a saved baseline to revisit after TLS, CDN, header or provider changes.
Next resources
After the First Saved Scan
Free PQC Readiness Report
See what the saved public scan report captures before deeper assessment.
PQC Migration Roadmap
Turn evidence into a 2026-2035 migration sequence.
Checklist for CTOs
Use a board-ready checklist for scans, inventory and pilots.
Discuss an Assessment
Book a short call when you need manual review or implementation support.
PQC Readiness Assessment FAQ
What is a PQC readiness assessment?
A PQC readiness assessment checks whether an organisation is prepared for post-quantum cryptography migration. It starts with visible public endpoints, then expands to cryptographic inventory, data lifetime, suppliers, APIs, signatures and migration priorities.
Can I start with a free assessment?
Yes. The free path starts with a public website scan and a saved result in a free account. That does not replace a full audit, but it gives you the first evidence record and a practical list of next steps.
What does the free scan not cover?
The free scan does not inspect internal systems, private APIs, data-at-rest encryption, code signing, key management, VPNs or supplier contracts. Those belong in the broader readiness assessment.
Who should use this page?
Use it if you are responsible for security, infrastructure, compliance or technology risk and need a low-friction way to start post-quantum planning without commissioning a full audit first.