Scope
Align ownership, objectives and governance.
Programme charterPQC DISCOVERY INFRASTRUCTURE
Run evidence-backed PQC assessments across every client.
Quelea gives security service providers one system for cryptographic discovery, expert review and client delivery, without taking over your methodology or relationships.
QUELEA WORKSPACE Northgate Bank · Connected
Connected platformOne inventory across the cryptographic estate.
Connect cloud, code, endpoints and on-prem sources to expand coverage and support a defensible transition plan.
Live demo
See your quantum exposure
within seconds.
Enter a domain. Watch Quelea find what a future quantum computer could break. No install, no login, no access to anything private, just the view an attacker already has of you.
- Find your exposure. Every public service you're running, and which ones use encryption a quantum computer will break.
- See what's already safe. The services that have moved to quantum-resistant encryption, and the ones that haven't.
- Know where to start. A clear, prioritised picture of what to fix first.
Aacme-pay.comSample accountScanning
0
services mapped
0
post-quantum ready
0
harvestable now
—
standards mapped
Starting…
THE PARTNER WORKFLOW
From cryptographic exposure to managed transition.
A practical engagement path that turns evidence into decisions, action and a defensible readiness programme.
Discover
Establish the cryptographic evidence base.
InventoryPrioritize
Focus effort on material risk and dependencies.
Risk viewPrepare
Design, sequence and test the migration.
RoadmapTransition
Implement, validate and sustain progress.
AssuranceContinuous evidence and monitoringQuelea maintains the evidence layer from first assessment through ongoing validation.Become a partner
PQC REQUIREMENTS BY REGION
The compliance clock has already started.
Governments, regulators and standards bodies are turning PQC guidance into dated action. See what is taking shape where you operate—and what readiness requires next.
Explore PQC requirementsREGULATION BY REGIONEXPLORE ALL REGULATION
North AmericaFederal inventory and migration planning
Mandatory requirements→EuropeCoordinated roadmaps and transition targets
Official guidance→Asia PacificGovernment, banking and critical infrastructure
Official guidance→Middle EastFinancial-sector inventory and action plans
Mandatory requirements→InternationalPublic TLS and cross-border frameworks
Mandatory + guidance→Open the Regulation page to select a country and review its authority, audience, readiness action and source.
Establish the cryptographic evidence base.
Governance, procurement and funded roadmaps.
High-risk systems and critical use cases.
Broader migration targets mature.
Status reflects published regulatory and standards signals—not a determination that a requirement applies to a particular organisation.
INDUSTRY BENCHMARKS
Benchmark every client against the context that matters.
From the public internet, Quelea benchmarks the externally observable cryptographic posture of more than 1,000 organisations across industries.
EUDORA · NIS2 · EU PQC roadmapUSNIST FIPS 203–205 · CNSA 2.0KSASAMA CSF · NCA NCSSECTORPCI DSS 4.0.1 · client obligations
OUTSIDE-IN VIEWPublicly observable services · no credentials or installationA benchmark for prioritisation—not a complete readiness or compliance assessment
External PQC capability by industryINDUSTRY MEDIAN
- Travel & hospitality: 51%
- Retail: 50%
- Banking: 49%
- Technology: 39%
- Insurance: 37%
- Healthcare: 31%
- Energy & utilities: 29%
- Telecommunications: 19%
- Education: 18%
Median share of each organisation’s publicly observed services capable of post-quantum hybrid key exchange.
External capability falls closer to the businessOBSERVED SERVICES
Approximate weighted result from the published tier counts. Modern edge infrastructure can mask migration gaps in business-facing services.
Legacy exposure persistsEXTERNAL VIEW
89%
of sampled organisations still expose TLS 1.2 somewhere.
Derived from the published industry rates. The migration challenge often sits in the remaining legacy services.
READY WHEN YOU ARE
Start with one domain. Scale across every client.
See the externally observable cryptographic posture of one organisation, or talk to us about delivering repeatable PQC assessments across your client portfolio.