PQC / CRYPTO-AGILITY / CBOM

PQC Readiness Score.

Additional page sections

Produces a maturity-band view of quantum-safe readiness with an unknown-evidence penalty and confidence level.

Version 3.1 Beta Protected engine PQC readiness maturity band
PURPOSE

Decision supported.

Produces a maturity-band view of quantum-safe readiness with an unknown-evidence penalty and confidence level.

Intended user

research, assurance and technical review teams

Output status

Preliminary outputHuman review requiredNot certification
USE CASES

Where this instrument fits.

  • Discuss PQC readiness without a misleading single score
  • Identify evidence gaps
  • Rank maturity dimensions
  • Prepare review with architecture and security teams
INPUTS

Required input fields.

  • Governance (required): Weak or unknown, Partial, Strong and evidenced
  • Inventory (required): Weak or unknown, Partial, Strong and evidenced
  • Crypto-agility (required): Weak or unknown, Partial, Strong and evidenced
  • Data lifetime classification (required): Weak or unknown, Partial, Strong and evidenced
  • Supplier readiness (required): Weak or unknown, Partial, Strong and evidenced
  • Protocol readiness (required): Weak or unknown, Partial, Strong and evidenced
  • PKI/code-signing readiness (required): Weak or unknown, Partial, Strong and evidenced
  • Testing/interoperability (required): Weak or unknown, Partial, Strong and evidenced
  • Executive ownership (required): Weak or unknown, Partial, Strong and evidenced

Data handling: this interface uses the L2ET protected same-origin instrument engine. Do not enter confidential, regulated, privileged, incident, medical or sensitive operational data.

METHOD

Radar logic.

Calculates maturity band and confidence from nine dimensions while penalizing unknown or weak evidence.

Source families

PQC transition maturitycrypto-agility governance

Assumptions

  • Maturity bands are orientation bands.
  • A strong band still requires technical validation.
  • Weights may need adjustment by sector.
INTERACTIVE INSTRUMENT

PQC readiness maturity band.

Use the controls below to generate a preliminary artifact. The output is intentionally bounded and requires human review.

OUTPUT ARTIFACT

PQC readiness maturity band.

The generated artifact includes findings, assumptions, limitations, recommended next actions and exportable structured output.

Export options

Copy outputMarkdownJSON
EXAMPLE

Example input and output.

Example input

Weak inventory, weak crypto-agility and weak PKI readiness with partial governance.

Example output

Outputs Initial or Inventory stage, low confidence and missing evidence list.

LIMITATIONS

What this tool does not do.

  • Not a certification.
  • Not a scanner.
  • Not an algorithm implementation review.

This instrument does not provide legal, medical, cryptographic, engineering, regulatory or compliance certification.

RELATED METHOD

Method and workflow links.

Read the family method note for assumptions, output artifacts, update policy and review boundaries.

Open methodology Open family

CHANGELOG

Version history.

  • v3.1 - Research-grade instrument template, method notes, assumptions, limitations, example and export actions added.
  • Last updated: 2026-05-27.
  • Maturity state: Beta.