Assess
Q-Day Assessment
One-time domain scan, Mosca HNDL risk, CycloneDX CBOM, executive PDF, and verify link.
Explore Assess →
Cryptographic posture management
Assess. Monitor. Convert.
Cryptographic visibility from first inventory to ongoing drift monitoring — CycloneDX CBOM, Mosca HNDL scoring, and remediation proof your auditors can verify.
Journey
Three tiers. One system of record.
Each tier builds on the last — baseline inventory, continuous monitoring, and program delivery with signed evidence.
Monitor
Q-Day Monitor
Scheduled re-scans, crypto diff alerts, remediation board, and standards tracking.
Explore Monitor →
Convert
Q-Day Convert
Prioritized playbooks, workshop cadence, partner orchestration, and re-scan verification.
Explore Convert →
Why teams choose Qtangl
Evidence, drift, and honest scope
Signed evidence
Every report ships with a content hash and signature — auditors verify at /verify without trusting Qtangl alone.
Continuous drift
Monitor diffs each scan against the last baseline so regressions surface before the next audit cycle.
Honest scope
Inventory aid and prioritization — not a formal attestation. We say what we do and do not claim.
Minutes, not months
Live fixture scan in under ten minutes. Compare that to spreadsheet programs that decay on first deploy.
Live today: Assess · Monitor · Convert journey · Sample CBOM + signed verify · Dashboard with schedules, DLQ, remediation
Why Qtangl
Built for security teams, not quantum researchers
Consulting firms sell decks. Scanner vendors sell point-in-time PDFs. Qtangl sells continuous evidence.
Evidence-first delivery
Signed PDF, CycloneDX CBOM, and independent verify links — built for GRC workflows, not slide decks.
Drift as the product
One-time assessments satisfy this quarter's board ask. Monitor turns inventory into a living system of record.
Framework-native mapping
NSM-10, CNSA 2.0, NIST IR 8547, PCI-DSS 4, and CMMC crosswalks on every finding — not a generic risk score.
Mid-market velocity
Self-serve demo, pilot in days, and pricing that fits security teams without a six-figure consulting SOW.
Evidence
Signed reports. Independent verification.
Every assessment exports a signed PDF and verify link. Auditors check signatures without trusting Qtangl alone.
Get started
See your crypto posture in one scan
Point Qtangl at a domain. Get Mosca HNDL scoring, a CycloneDX CBOM, and a signed PDF your GRC team can verify — then grow into Monitor when you're ready for continuous drift tracking.