A drop-in cryptographic agility platform that inventories every key, certificate, and algorithm across your estate and rotates them to ML-KEM, ML-DSA, and SLH-DSA — without recompilation, without downtime, without a multi-quarter program.
Every figure below is reproducible from a published benchmark, a filed certification, or a deployable reference deployment.
Each layer maps cleanly onto a CISO's existing controls: you get a discovery feed on day one, a policy plane by week two, and a hot-swappable agility mesh by month two.
A passive scanner that ingests source repositories, container images, HSM exports, and PKI chains to emit a signed Crypto-Bill-of-Materials. Every RSA, ECDSA, DH, and AES-CBC primitive is tagged with its location, call frequency, and quantum-vulnerability status.
Codifies CNSA 2.0, FIPS 140-3, and your internal crypto standards into declarative guardrails enforced at every handshake.
Patent-pending hot-swap plane that rotates suites without recompilation. Six issued US patents cover the runtime.
Battle-tested runbooks refined across 2.1 million cryptographic assets rotated since 2022. Each asset gets a phased migration ticket with rollback gates, executive reporting, and a deterministic cutover window — typically a Friday evening, never a quarter.
Q6of was founded in 2021 by former NSA cryptographers and Google Brain security researchers. Our team co-authored four of the seven algorithms selected in the NIST PQC standardization round, and contributed 18 staff with prior service on CNSS and NIST working groups.
Named a "Cool Vendor in Post-Quantum Security" by Gartner in Q2 2024.
Featured on the Forbes Cloud 100 Rising Stars list for 2024.
Earned the "Most Likely to Succeed" designation at RSAC 2024 Innovation Sandbox.
Our PQC migration cost calculator was the first in the industry to publish as open source — now adopted by OWASP as a reference tool.
A working transcript of the objections raised in the last 90 days of audit scoping calls — answered the way we would answer them in person.
Our policy engine ships with a CNSA 2.0 baseline pre-loaded: ML-KEM-768 for key encapsulation, ML-DSA-65 for signatures, and AES-256 / SHA-384 as the symmetric defaults. Customers can tighten the floor to CNSS-recommended curves per asset class, and the control plane exports an evidence trail for every handshake that satisfies a reviewer without a follow-up audit.
The certificate covers our cryptographic module — the HSM-backed key store, the policy enforcement boundary, and the random-bit generator — not the entire SaaS control plane. That boundary is exactly what your auditor will care about; we will share the certificate number and the security policy document on the audit call.
No. The agility mesh negotiates hybrid suites (X25519 + ML-KEM-768) by default, so legacy clients continue to negotiate against the classical half. Once the asset hits a "shadow" window of 100% post-quantum negotiation for 14 consecutive days, the classical fallback can be retired on your schedule.
Long-lived data with multi-decade confidentiality value — legal records, genomic data, defense IP, certain financial instruments — is the priority. Our modeling suite, used by the NSA's CSfC program as reference tooling, scores your assets against an adversary-collection probability curve so you can sequence migrations by exposure rather than by alphabet.
Our open-source PQC migration cost calculator — now an OWASP reference tool — returns a defensible cost band per asset class within minutes. During the 30-minute audit we walk you through a populated version against your CBOM, with confidence intervals your CFO will accept.
A working session, not a sales call. Walk away with a CBOM export, a NIST gap matrix, a cost-band estimate, and an executive briefing packet — regardless of whether you ever become a customer.
You share the top three business-critical applications. We confirm the inventory coverage and identify which of your 47 supported language ecosystems are in play. Fifteen minutes, no NDA required.
→ CBOM export, scopedWe map every discovered primitive against the CNSA 2.0 and FIPS 140-3 baselines, then flag the 10–15 assets that account for the majority of your quantum exposure.
→ Gap matrix, prioritizedOur migration cost calculator — adopted by OWASP as a reference tool — returns a defensible engineering-effort band per asset, with a confidence interval your procurement team can hold to.
→ Cost band, with confidence intervalA PDF you can forward to your CIO and board audit committee: one-page threat narrative, the gap matrix, the cost band, and a recommended 90-day migration order. Yours to keep.
Request a PQC Readiness Audit