PQC tools · exposure scorer
Which of your cryptography is exposed first.
An attacker can copy encrypted data today and read it once a large enough quantum computer exists. An asset is exposed when X, how long it must stay protected, plus Y, how long it takes you to migrate it, is more than Z, the years you expect before that computer exists.
This runs entirely in your browser. Nothing you type is sent anywhere or stored. An institution should not have to hand its cryptographic inventory to a stranger to find out whether it has a problem.
Score it
X plus Y exceeds Z by 24 years. Anything copied today can be read once the capability exists.
X plus Y exceeds Z by 10 years. Nothing can be harvested from a signature, but once the capability exists the key can be forged; X is how long the key must still be trusted.
Inside Z by 1 year. A slower migration or a longer lifetime would flip this.
Symmetric. The known quantum attack gives only a square-root speedup, which this size absorbs. Not a migration target.
Comfortably inside the horizon on the values given.
Choosing Z
Z is a choice, not a fact.
In the Global Risk Institute’s expert survey, the chance of a quantum computer able to break today’s public-key cryptography is 28 to 49% within ten years and 51 to 70% within fifteen. The default here, 10 years, is the near edge of that range. Move the slider and watch the ranking change.
A ranking is not an assessment
It cannot see your estate
You typed these rows. Nothing here finds an asset you forgot, and the one nobody remembers is usually the one that matters. A real inventory is built by looking, not recalling.
It is arithmetic only
An analyst weighs things this cannot: a retention period set by law, or a supplier who controls half your schedule. The sample deliverable tiers some rows differently for that reason, and says why.
It leaves no record
This page produces a ranking on your screen and nothing else. It is not signed or dated, and not something a supervisor would accept.
The real thing
See it done on a full inventory.
The sample deliverable applies the same rule to a full inventory for an invented bank, with an analyst’s judgment on top.