Coverage
31 languages, 13 configuration formats, 10 evidence input surfaces.
Support migration planning across modern applications and established infrastructure.
- Specialist, legacy, and modern stacks
Platform
One evidence architecture from cryptography discovery to release control.
RelixQ normalizes source and protocol evidence, maps HNDL exposure, preserves proof boundaries, and delivers the result to leadership, security operations, and engineering workflows.
Environment fit
Built for the estate you already run.
Coverage, connections, and evidence formats that fit the systems your teams already operate.
Connected operations
Bring evidence in. Send action to the systems teams already use.
Connect source control, identity, cloud, and delivery workflows, then route posture to SIEM, observability, tickets, incidents, on-call, and chat.
- Source, identity, cloud, and CI connections
- Security and observability delivery
- Alerting, ticketing, and status sync
Interoperability
Standards-based evidence stays portable by design.
Use widely adopted security and observability formats so RelixQ evidence can move through existing governance and engineering systems, and cite the standard a finding relates to.
- SARIF and OCSF findings
- CycloneDX CBOM and SBOM ingest
- NIST, national, and control-framework citations
Quantum exposure assessment
QAST turns inventory into a time-bound exposure model.
Understand your quantum exposure and decide where to focus your migration effort.
Observed findings are clearly distinguished from modeled risks.
Leadership metric
RelixQ Score makes posture traceable instead of decorative.
Track your organization's post-quantum readiness and see where your migration program is making progress.
What the workflow carries
- Traceable score drivers
- Project and portfolio posture
- Score deltas and readiness trend
Discovery and inventory
Inventory code, dependencies, certificates, protocols, and assets together.
Build a clear picture of where cryptography is used so teams can plan and coordinate migration.
What the workflow carries
- Source-code and configuration evidence
- Dependency, CycloneDX, and SPDX ingest
- TLS endpoint and certificate posture
- JWT, SAML, mTLS, and infrastructure coverage
- Asset inventory and CycloneDX CBOM export
Compatibility evidence
PQC Lab shows what a protocol actually negotiated.
Review compatibility evidence from approved systems to support post-quantum migration decisions.
What the workflow carries
- TLS and hybrid negotiation posture
- Classical acceptance and downgrade context
- Certificate and protocol evidence
- Read-only observations
- No application-payload mutation
Operations
Evidence delivered to the operating stack
Route posture and findings to SIEM, observability, ticketing, incident, chat, and webhook destinations.
Operating controls
Govern, gate, report, and integrate.
Assessment value persists only when the same evidence drives decisions and developer behavior after the initial review.
Governance
Policies and exceptions keep every decision explainable.
Attach posture expectations, accepted risk, scope, owners, approvers, expiration, and audit history to the same project evidence, then relate a finding to the control frameworks your organization answers for.
- Policy evaluation and an approved-cryptography catalog
- TTL-bounded exceptions
- Named approvers
- Decision and audit history
CI and release gates
Stop new migration debt before merge.
Bring post-quantum readiness checks into your delivery workflow to help prevent new migration debt.
- Warn and block modes
- SARIF output
Reports and integrations
Deliver evidence to leadership and the operating stack.
Generate executive and technical artifacts, then route findings and posture changes into SIEM, observability, ticketing, incident, on-call, chat, or webhook systems.
- Executive, technical, and remediation reports
- JSON, CSV, SARIF, Markdown, and PDF workflows
- SIEM and OCSF delivery
- Observability and metrics destinations
- Ticketing, incident, on-call, and chat routing
Technical evaluation
Validate the workflow in a bounded pilot.
Scope the application portfolio, evidence boundaries, and operating integrations for an Enterprise evaluation.