PlancKey

Free external PQC assessment

PlancKey

Quantum readiness.Get your cryptographic score before regulators do.

See the post-quantum signals in your public domain. Get a clear Q-Signal™ score, understand the evidence and bring a better report to your next security conversation.

Checking a supplier? Scan a vendor

Free to startNo installationNo internal credentials
Explore the product
01

Observe

Public DNS and available HTTPS evidence

02

Understand

A Q-Signal™ score and downloadable report

03

Compare

Anonymous sector benchmarks

01 / The Q-Signal™ experience

Less uncertainty.
More useful evidence.

A transparent score is the start—not the conclusion. See what was observed, what needs attention and what remains unverified.

01 / Observe

Start with a domain. Not an installation.

Submit a domain you are authorized to scan. PlancKey checks public DNS and requests available HTTPS observations. No credentials or access to your internal systems are needed.

Run your free scan
Authorized domain

Public DNS

Addresses and mail routes

HTTPS observations

Available endpoints and key exchange

Leaf certificates

Public keys and issuer signatures

DNS arrives first. HTTPS evidence can take several minutes or be unavailable.
External evidence only. Not a security certification or a guarantee of quantum readiness.What readiness means

02 / PlancKey Q-Signal™ Index

Your score.
The bigger picture.

How is your sector approaching the post-quantum transition? Explore anonymous benchmarks and search for subscribers who choose to share their Q-Signal™ profile.

Explore the Index

Understand your sector

Score distributions and adoption signals put external evidence in context.

Find opt-in subscribers

Public listings require consent and an active subscription. Subscriber onboarding is still being established.

Private by default

Free-scan names and scores are not listed publicly. Small benchmark groups are withheld.

The Index reflects observed PQC support, not a security certification or proof that an organization is well secured.

03 / Put the report to work

Check yourself.
Check your vendors.

For security teams

Bring dated external evidence to customer questionnaires and internal planning. Use the findings to start a broader discussion about your cryptographic inventory.

Scan your domain

For vendor-risk teams and partners

With a supplier’s permission, review its public-domain PQC signals. Keep the scoped PDF report as one input to procurement and third-party risk reviews.

Explore partnerships
04 / Why start now?

The standards are here.
Preparation takes time.

Long-lived data needs a long-term plan. An external scan won’t answer every question, but it gives you a practical place to begin.

Explore the learning centre

Post-quantum standards are published

NIST finalized FIPS 203, 204 and 205 in August 2024: standards for ML-KEM, ML-DSA and SLH-DSA.

Understand PQC

Data can be harvested today

Harvest-now, decrypt-later risk concerns encrypted data collected now for potential future decryption. Priorities depend on how long your data must stay confidential.

Understand HNDL

Migration is more than replacing an algorithm

Inventory, dependencies and testing all matter. Published transition guidance varies by system and jurisdiction; it is not a universal business deadline.

Understand crypto agility
05 / Built on a simple principle

Measure first.
Make better decisions.

PlancKey takes its name from Max Planck and the beginnings of quantum theory. Our approach is practical: make the evidence clear, be honest about its limits and help you choose the next step.

Need to go beyond public endpoints? Internal discovery, migration planning and monitoring are proposed paid engagements, with scope and availability agreed before purchase.

Fig. 1 · One quantum at a time.

No “quantum-proof” promises. The scan covers public DNS and available HTTPS evidence—not internal systems, mail encryption, VPNs or complete quantum readiness.

Our safeguards
Your next step

Start with your domain.

Get public evidence. Review your Q-Signal™ report. Decide what to investigate next.

Checking a supplier? Scan a vendor

Scan domains you are authorized to assess, or suppliers for legitimate due diligence. HTTPS findings may take several minutes or be unavailable.