Banking
TLS inventory
NSM-10 and PCI-DSS mapping for external-facing crypto.
HNDL exposure · CBOM export · verify link
Open scenario →
Cryptographic posture management
Assess. Monitor. Convert.
Find quantum-vulnerable cryptography in your authorized scope, prioritize migration work, and show what changed with signed evidence reviewers can verify independently.
Sample assessment
From crypto inventory to a clear next step
Explore illustrative findings, a CycloneDX CBOM, and signed reports. These sample figures do not describe your estate. Qtangl is an inventory aid, not a formal audit.
- Example vulnerable endpoints
- 47
- Example readiness score
- 62 / 100
- Data source
- Sample
Assess → Monitor → Convert
One platform from baseline to proof of fix.
Assess
Baseline in one session
Live scan, Mosca HNDL, CycloneDX CBOM, and signed PDF.
Monitor
Catch drift early
Scheduled re-scans, diff alerts, and a remediation board.
Convert
Prove the fix
Prioritized playbooks, re-scan verification, and auditor packs.
Exposure
Readiness scenarios for regulated teams.
Gov contractor
CMMC crypto controls
CNSA 2.0 deadline tiers mapped to your TLS footprint.
Control gaps · remediation backlog · signed report
Open scenario →
Healthcare
HNDL exposure
HIPAA-sensitive data paths with NIST IR 8547 alignment.
Mosca timeline · priority queue · audit pack
Open scenario →
Learn before you scan
Understand Q-Day risk in minutes
Harvest-now-decrypt-later exposure is a planning problem, not a broken-crypto alarm. Use Mosca's inequality to see if your data outlives your migration runway — then run a live assessment.
Loading Mosca calculator…
Example Mosca timeline
Illustrative 10-year retention · 5-year migration · 8-year quantum horizon (regional bank scenario).
Mosca inequality: X + Y > Z
X data shelf (10y)
Y migration (5y)
Z to Q-Day (8y)
10-year data retention plus a 5-year migration runway exceeds an 8-year quantum timeline — act now on HNDL exposure.
ROI & evidence
Compare spreadsheet programs and consulting baselines to continuous Monitor — or preview the signed report pack your GRC team receives after every assessment.
Why teams choose Qtangl
Why security teams choose Qtangl
Signed evidence
Every report ships with a content hash and signature — auditors verify at /verify without trusting Qtangl alone.
Continuous drift
Monitor diffs each scan against the last baseline so regressions surface before the next audit cycle.
Honest scope
Inventory aid and prioritization — not a formal attestation. We say what we do and do not claim.
Minutes, not months
Live fixture scan in under ten minutes. Compare that to spreadsheet programs that decay on first deploy.
Evidence
Scan first. API when you're ready.
POST a target domain. Get inventory, Mosca HNDL risk, CBOM exports, and a signed PDF your GRC team can verify.
Request
{
"target": "api.example.com",
"scan_type": "tls_inventory",
"options": {
"include_cbom": true,
"mosca_data_lifetime_years": 10
}
}Response
{
"status": "completed",
"readiness_score": 62,
"findings": {
"quantum_vulnerable": 47,
"transitional": 12,
"quantum_safe": 8
},
"mosca": {
"hndl_risk": "elevated",
"data_lifetime_years": 10,
"quantum_timeline_years": 8
},
"exports": {
"cbom": "cyclonedx-json",
"report_url": "/r/sample-token",
"verify_url": "/verify?token=sample-token"
},
"method": "pqc_scanner"
}Q-Day readiness
Ready for your first Q-Day assessment?
Run a live scan, review Mosca HNDL exposure, and export signed evidence — or request a guided pilot for your domain.