Guides

Post-Quantum Readiness Check Guide

A free tool to test whether your encryption infrastructure is ready for the quantum computing era.

Part of: Post-Quantum Cryptography Assessment

TL;DR

  • The Post-Quantum Readiness Check analyzes your domain's cryptographic configuration — TLS algorithms, key exchange, and certificates — and assesses how ready it is for quantum-resistant encryption.
  • It is free to run and requires only a domain name — nothing to install.
  • Use the prioritised results to plan migration toward the NIST post-quantum cryptography standards.

Summary

The Post-Quantum Readiness Check analyzes your domain's cryptographic configuration — TLS algorithms, key exchange, and certificates — then assesses how ready you are to move to quantum-resistant encryption (post-quantum cryptography).

What does it do?

The PQC Check scans your domain's endpoints from the outside to identify the cryptographic algorithms and parameters currently in use, including TLS key exchange types and certificate strength.

The result is a post-quantum readiness assessment: how much of your traffic can already be secured with quantum-resistant algorithms, and what should be upgraded first.

Who should use it?

This guide is for anyone responsible for cryptography strategy and long-term data protection.

  • IT security teams and infrastructure architects
  • Financial, healthcare, and critical-sector companies with long-lived data
  • Vendors that must prove cryptographic readiness to clients
  • Research and compliance teams tracking harvest-now-decrypt-later risk

What inputs does it require?

You only need the public domain name you want to test — no agent installation, no credentials, and no internal access.

  • A domain name (e.g. example.com)
  • An internet connection to receive the scan results

How does it work?

Scanning is performed from the outside — the same way an attacker sees your systems.

  1. Enter your domain name into the PQC Check form.
  2. The system tests public TLS endpoints and collects cryptographic algorithm details.
  3. A readiness score is calculated based on quantum-resistant algorithm support, e.g. hybrid X25519+ML-KEM key exchange.
  4. The assessment is displayed with prioritized remediation recommendations.

What results can you expect?

The PQC Check output includes a readiness score, details of the detected algorithms, and prioritized recommendations for moving to quantum-resistant cryptography.

  • Post-quantum readiness score
  • Detected TLS and key-exchange algorithm details
  • Actionable upgrade recommendations

What are its limitations?

The PQC Check only assesses externally visible cryptographic configuration. It does not evaluate internal cryptography such as encrypted databases, closed applications, or digital signing workflows.

The assessment is a point-in-time snapshot; configurations can change afterwards. Results are educational and not a compliance certification.

Frequently asked questions

Related links

Start the PQC Check

Test your domain's quantum readiness now — free and takes only seconds.

Start the PQC Check

← Back to all guides