Crypto-agility checklist

Post-quantum readiness diagnostic

Answer with the real state of your organization. The score stays in your browser and helps frame the next actions.

Do you have an inventory of asymmetric cryptography usage?
Are your TLS endpoints and certificate chains mapped?
Are long-lived SSH keys and bastions governed?
Is code and artifact signing included in scope?
Have you identified data exposed to harvest now, decrypt later risk?
Do your critical vendors publish a PQC or hybrid roadmap?
Can you change algorithms without a heavy application rewrite?
Do you have an environment to test hybrid modes and performance impact?