PQC DISCOVERY INFRASTRUCTURE

Prepare for post-quantum.

Backed by 169,800 scanned endpoints

Quelea gives security service providers one system for cryptographic discovery, expert review and client delivery, without taking over your methodology or relationships.

Become a partner Run a free scan
QUELEA WORKSPACE Northgate Bank · Connected
Quelea connected platform showing cryptographic posture across internet-facing, cloud, code, endpoints and on-premises sources
Connected platformOne inventory across the cryptographic estate.

Connect cloud, code, endpoints and on-prem sources to expand coverage and support a defensible transition plan.

Live demo

See your quantum exposure
within seconds.

Enter a domain. Watch Quelea find what a future quantum computer could break. No install, no login, no access to anything private, just the view an attacker already has of you.

  • Find your exposure. Every public service you're running, and which ones use encryption a quantum computer will break.
  • See what's already safe. The services that have moved to quantum-resistant encryption, and the ones that haven't.
  • Know where to start. A clear, prioritised picture of what to fix first.
Scan your domain →
Aacme-pay.comSample accountScanning
0
services mapped
0
post-quantum ready
0
harvestable now
—
standards mapped
Starting…

INDUSTRY BENCHMARKS

Benchmark every client against the context that matters.

From the public internet, Quelea benchmarks the externally observable cryptographic posture of more than 1,000 organisations across industries.

EUDORA · NIS2 · EU PQC roadmapUSNIST FIPS 203–205 · CNSA 2.0KSASAMA CSF · NCA NCSSECTORPCI DSS 4.0.1 · client obligations

OUTSIDE-IN VIEWPublicly observable services · no credentials or installationA benchmark for prioritisation, not a complete readiness or compliance assessment

External PQC capability by industryINDUSTRY MEDIAN
  • Travel & hospitality: 51%
  • Retail: 50%
  • Banking: 49%
  • Technology: 39%
  • Insurance: 37%
  • Healthcare: 31%
  • Energy & utilities: 29%
  • Tele­communications: 19%
  • Education: 18%

Median share of each organisation’s publicly observed services capable of post-quantum hybrid key exchange.

External capability falls closer to the businessOBSERVED SERVICES
Managed edge66%
Customer-facing38%

Approximate weighted result from the published tier counts. Modern edge infrastructure can mask migration gaps in business-facing services.

Legacy exposure persistsEXTERNAL VIEW
89%

of sampled organisations still expose TLS 1.2 somewhere.

Derived from the published industry rates. The migration challenge often sits in the remaining legacy services.

Explore Industry Benchmarks

PQC REQUIREMENTS BY REGION

The compliance clock has already started.

Governments, regulators and standards bodies are turning PQC guidance into dated action. See what is taking shape where you operate, and what readiness requires next.

Explore PQC requirements
REGULATION BY REGIONEXPLORE ALL REGULATION
North AmericaFederal inventory and migration planning
Mandatory requirements
EuropeCoordinated roadmaps and transition targets
Official guidance
Asia PacificGovernment, banking and critical infrastructure
Mandatory requirements
Middle EastFinancial-sector inventory and action plans
Mandatory requirements
InternationalPublic TLS and cross-border frameworks
Mandatory requirements

Open the Regulation page to select a country and review its authority, audience, readiness action and source.

NowDiscover

Establish the cryptographic evidence base.

2027–2028Inventory and plan

Governance, procurement and funded roadmaps.

2030–2031Prioritise

High-risk systems and critical use cases.

2033–2035Transition

Broader migration targets mature.

Status reflects published regulatory and standards signals, not a determination that a requirement applies to a particular organisation.

HOW WE DELIVER

From one domain to continuous monitoring.

Five phases, delivered by Quelea beneath your practice. Each phase builds on the last. Take them one at a time, or several together.

  1. Phase 01External discoveryStart with a domain: TLS, certificates and public-key material.
  2. Phase 02Operational systemsCertificates, key stores, VPN and database encryption.
  3. Phase 03Code and pipelinesHardcoded keys, cryptographic libraries, signing in the pipeline.
  4. Phase 04Migration planningAn order of work your engineers and your board both accept.
  5. Phase 05Continuous monitoringDrift reported as it happens, on a fixed cadence.

See how we deliver

READY WHEN YOU ARE

Start with one domain. Scale across every client.

See the externally observable cryptographic posture of one organisation, or talk to us about delivering repeatable PQC assessments across your client portfolio.

Run a free scan Become a partner