HOW WE DELIVER
From one domain to continuous monitoring.
You own the client. Quelea delivers the evidence and the work beneath you, in five phases.
Each phase builds on the last. Take them one at a time, or several together.
Phase 01
External discovery
Start with a domain: TLS, certificates and public-key material.
Sample account
Scans the domain from the public internet: TLS, key exchange, certificates, public keys, SSH, VPN and mail. No access needed.
Scopes the engagement: owners, objectives, governance. Presents the findings to the client.
External exposure report and a baseline.
Sources Internet-facing services · Public certificates
Phase 02
Operational systems
Certificates, key stores, VPN and database encryption.
Illustrative demo data
Connects read-only to internal systems, inventories keys and certificates, and matches each key across every place it appears.
Arranges access with the client and checks the findings against the client's asset register.
A connected cryptographic inventory, every finding backed by evidence.
Sources Cloud KMS · Internal PKI · Identity providers · Secrets vaults · VPN · Database encryption
Phase 03
Code and pipelines
Hardcoded keys, cryptographic libraries, signing in the pipeline.
Illustrative demo data
Scans source code, dependencies and CI/CD for hardcoded keys, cryptographic libraries and signing steps, and maps what depends on what.
Brings in application owners and confirms which paths are really in use.
Cryptography-in-code findings and a dependency map.
Sources Source repositories · Package manifests · CI/CD · Container images
Phase 04
Migration planning
An order of work your engineers and your board both accept.
61% quantum-vulnerable
846 items must change
- Wave 1Q1Treasury signing key and customer TLS edgeSupports evidence toward DORA · PCI DSS 4.0.1
- Wave 2Q2 to Q3Internal CA to hybrid, VPN off TLS 1.2Supports evidence toward NIS2
- Wave 3Q4 onwardCode signing, libraries, the long tailSupports evidence toward FIPS 203 to 205
92% PQC-capable
Remaining risk accepted by the board
Illustrative demo data
Ranks every finding by exposure, how long the data must stay secret, and dependencies, then drafts the order of work in waves, with the obligations each wave supports evidence toward.
Refines the plan with their own methodology and gets engineering and the board to agree.
A risk view and a migration roadmap, from A to B.
Sources Everything from phases 01 to 03
Phase 05
Continuous monitoring
Drift reported as it happens, on a fixed cadence.
Illustrative demo data
Re-runs discovery on a set schedule and reports drift, fixes and progress against the plan.
Drives the migration, confirms each change against fresh evidence and reports to the client.
A live dashboard and progress reporting.
Sources All sources connected
SUPPORTS EVIDENCE TOWARD
- FIPS 203 to 205
- CNSA 2.0
- NIST IR 8547 (draft)
- EU PQC roadmap
- DORA
- NIS2
- PCI DSS 4.0.1