QAST
Quantum Exposure Assessment turns crypto inventory into HNDL exposure windows, attack paths, safe validation, and evidence.
Platform
QAST, RelixQ Score, PQC Lab, and gates in one workflow.
RelixQ connects source evidence, protocol posture, data lifetime, attack paths, score impact, and developer enforcement so post-quantum migration becomes an operating system rather than a spreadsheet program.
RelixQ Score
A leadership-facing metric with traceable drivers, confidence, score deltas, next actions, and readiness history.
PQC Lab
TLS, certificate, protocol, and hybrid-readiness validation with honest empty states until inventory is connected.
Developer gates
PR and release checks stop new HNDL exposure before it becomes migration debt.
Operating model
One evidence chain, many buyer surfaces.
The same pipeline supports engineering gates, CISO score tracking, auditor reports, SIEM events, and customer-facing proof.
- 01
Inventory
Find crypto in code, dependencies, TLS, certificates, JWT, SAML, mTLS, and infrastructure evidence.
- 02
Classify
Separate BROKEN_NOW, HNDL_AT_RISK, and QUANTUM_OK so AES/SHA and PQC algorithms are not mislabeled.
- 03
Map
Bind findings to data assets, confidentiality horizons, harvestability, and blast-radius graph context.
- 04
Validate
Use signed-RoE, read-only PQC handshake probes to check hybrid selection, classical acceptance, and true downgrade.
- 05
Prove
Attach safe classical-break proofs and modeled quantum cost estimates with explicit assumptions and citations.
- 06
Operate
Feed RelixQ Score, retest state, regression gates, PR checks, reports, alerts, and tickets from the same pipeline.
What makes it different
A software product for what the market often delivers as services.
HNDL math
Dated exposure windows, not flat crypto counts
Models DataAsset lifetime, harvestability, crypto status, and Mosca X+Y>Z so teams can see which data is harvestable now and decryptable later.
Attack paths
Graph projection to crown-jewel data
Projects quantum attack paths over the readiness graph from exposed endpoints and ciphertext to the data assets that actually matter.
Safe validation
Consent-gated active probes
Runs read-only TLS and SSH negotiation checks only behind signed Rules of Engagement, authority attestation, blackout windows, rate clamps, and kill switches.
Break proofs
Classical proof without quantum theater
Uses local golden fixtures and modeled Shor/Grover cost estimates to separate proven classical breaks from modeled HNDL risk. No decryption claim, ever.
Score
RelixQ Score with HNDL drivers
Turns exposure into a leadership metric with traceable drivers, confidence, next actions, score deltas, and a timeline of readiness progress.
Dev loop
PR and release gates
Blocks new HNDL exposures before merge, supports SARIF and baselines, and links remediation to retest/regression status instead of a static report.