$SWEEP {{ caText }}

not live yet

Q-Day is coming

Quantum computers will break the internet's encryption. Is your money ready?

Banks, exchanges, your wallet — most still run encryption a quantum computer will crack. And hackers are harvesting your scrambled data today to unlock it the day quantum lands. See who's already safe — in 5 seconds.

Scan your whole stack at once →

We check each site from our own server. We never see your data or your traffic — we can't.

              {{ line }}

What this is

Quantum computers are coming, and they'll crack the encryption that protects most of the internet today. Hackers can copy your scrambled data now and unlock it years later, once those computers exist. Some sites have already upgraded to quantum-proof encryption — CryptoSweep checks which ones, live.

Quantum-safe · already protected Half-protected · ready, not on At risk · crackable later

{{ readoutHost }} · key_exchange

{{ readoutGroup }} {{ readoutCodepoint }}

{{ plainToggleLabel }}

{{ g.term }}

this session, if captured now, ages toward decryptability — {{ hndlClock }}

{{ card.role }}

{{ card.value }}

Flex your scan

Post the card anywhere, or share a link that re-scans live for whoever opens it.

02 / the spine

Superposition → Collapse

An unmeasured host is epistemically indeterminate. The handshake is the measurement; the negotiated group is the eigenstate.

In plain terms: you can't tell if a site is quantum-safe until you actually test it. So we do, live.

Lattice = the math

ML-KEM is lattice-based. The safe state is a crisp hyperdimensional lattice — the structure a quantum computer can't shortcut.

In plain terms: the upgrade hides the key inside a math problem so hard that even a quantum computer has no shortcut.

HNDL = a clock

"Harvest now, decrypt later" is a time threat. The vulnerable state carries a calm data-age counter aging toward decryptability.

In plain terms: data stolen today can be unlocked later. The countdown starts the moment it's captured.

03 / recently measured

            {{ row.glyph }}
            {{ row.host }}
            {{ row.group }}
            {{ row.ago }}
          

NIST FIPS 203 CycloneDX 1.6 RFC 8446

Check one site, or scan everything you use at once.

See the Quantum Race →

{{ cbomTeaser }}

Every measurement is exportable, auditable, signed.

Open CBOM Explorer →

scan / report · {{ readoutHost }}

measured facts · read off the wire

            {{ f.label }}
{{ f.value }}

classification reasoning

{{ card.role }}

{{ card.value }}

harvest-now-decrypt-later

session captured {{ hndlClock }} ago — aging toward decryptability

open the HNDL clock →

wire evidence

open raw handshake ` →

{{ wirePreview }}

CBOM · CycloneDX 1.6 ✓

{{ cbomText }}

enable X25519MLKEM768 hybrid — here's the config

# nginx (OpenSSL 3.5+)
ssl_protocols TLSv1.3;
ssl_ecdh_curve X25519MLKEM768:X25519:secp256r1;

The Quantum Race · {{ fleetCount }} sites

{{ fleetSafePct }}

quantum-safe

● {{ fleetSafeN }} safe● {{ fleetAmberN }} amber● {{ fleetVulnN }} vuln

the fleet lattice

{{ h.host }}

{{ h.group }}

risk-ranked

          hostnegotiated groupverdicthndl agemeasured
        

            {{ h.host }}
            {{ h.group }}
            {{ h.verdict }}
            {{ h.age }}
            {{ h.last }}
          

cbom explorer · {{ readoutHost }}

A CycloneDX 1.6 BOM as a navigable object.

CycloneDX 1.6 ✓

migration diff — {{ diffCounter }} · removed lines strike red, added highlight green

crypto-assets

nistQuantumSecurityLevel: {{ a.qlevel }}
oid: {{ a.oid }}

provenance · signature

sha256: {{ cbomHash }}
signature: verified ✓ · detached cosign

raw CycloneDX 1.6

{{ cbomText }}

04 / methodology

How the measurement works.

we read the actual negotiation — not a banner string. no guesses, no false positives.

stage {{ p.n }}

{{ p.io }}

{{ pipelineDetail }}

the classifier · pure, deterministic

04.5 / #lattice — why safe is safe

The lattice shortcut explorer.

Drag the "Shor shortcut" vector. In flat space it snaps to target — RSA/ECDH die here. In the lattice, it dead-ends; difficulty explodes with dimension.

ML-KEM-768 — rank-3 module, 256-degree ring ≈ 768-dimensional lattice. (analogy — the real hardness is Module-LWE.)

flat 2D · ECDH-like

{{ flatStatus }}

lattice · dim {{ dimVal }} · ML-KEM

candidate points checked: {{ candidates }}

dimension {{ dimVal }}

05 / threat model — HNDL

Harvest now. Decrypt later. The clock already started.

An adversary records your encrypted traffic today and decrypts it when a CRQC exists. Your secrets' shelf life is the only variable.

data sensitivity lifetime — {{ lifeVal }} years

session token = days · custody seeds = forever

CRQC arrival band — ~{{ crqcVal }}

a probability band, never a fake point date

capture today

CRQC band

{{ exposureVerdict }}

session captured {{ hndlGlobalClock }} ago — aging toward decryptability

06 / integrate

Fail the build on a quantum-vulnerable handshake.

The same measurement engine as the hero — as a build gate. The product is an API with a website on top.

cryptosweep ci

$ {{ termCmd }}
{{ l.text }}
exit code: {{ termExit }} · {{ termExitMsg }}

exit-code semantics

            {{ e.code }}{{ e.name }}{{ e.desc }}
          

07 / pricing

Priced on hosts monitored, not seats.

The unit of value is a measured host.

hosts monitored {{ priceHosts }}

estimated · {{ priceTier }} {{ priceAmount }}/mo

{{ t.price }}

·{{ f }}

08 / trust

What we measure, and what we never touch.

we read handshake parameters, not plaintext — physically, we cannot see your data.

anonymous scan fleet account

persisted

{{ p }}

never stored

{{ p }}

standards lineage

NIST FIPS 203 — ML-KEM CycloneDX 1.6 RFC 8446 — TLS 1.3