CRYPTOGRAPHIC INVENTORY / DEVICE-LOCAL
Know where cryptography lives before you replace it.
Open a CycloneDX CBOM. Vuln Runner separates quantum-vulnerable public-key assets, hybrid transitions, finalized NIST algorithms, and unknowns—then tells you what evidence the migration still needs.
One standardized file. No account required.
The first useful result is a transparent classification—not a readiness score. Your source file remains on this device.
- 01Algorithms and primitives
- 02Protocols and relationships
- 03Certificates and key material
- 04Unknowns and missing context
VERSIONED POLICY / NOT MODEL MEMORY
The standard moved. The evidence model moved with it.
This snapshot distinguishes finalized standards from work still in progress. Every production classification should retain its policy version and be re-evaluated as standards change.
“A hybrid handshake makes the system quantum-safe.”
“A CBOM proves every cryptographic asset was discovered.”
“Post-quantum key establishment proves post-quantum authentication.”
“One score can replace owners, migration tests, and rollback evidence.”