Scan a public repo or a code snippet for cryptography that a large-scale quantum computer could break (RSA, ECDSA, ECDH, DSA), and get a post-quantum readiness score with remediation guidance.
ECDSA (Elliptic Curve Digital Signature Algorithm) is the classical signature scheme used by Bitcoin, Ethereum, and most blockchains today — its security relies on the elliptic curve discrete logarithm problem, which Shor's algorithm solves efficiently on a large quantum computer. ML-DSA (formerly CRYSTALS-Dilithium) is a NIST-standardized post-quantum signature algorithm based on lattice problems instead, which have no known efficient quantum attack. In short: ECDSA breaks under a sufficiently powerful quantum computer, ML-DSA is designed not to.
It statically scans your source code (a pasted snippet or a public repo) for cryptography that a large-scale quantum computer could break: RSA, ECDSA, ECDH, and DSA key generation and signing calls, plus weak classical hashes like MD5 and SHA-1. Each finding includes the exact file and line, and a recommended post-quantum replacement (typically ML-KEM for key exchange, ML-DSA or SLH-DSA for signatures).
Yes. Scanning code and getting a readiness score is free, with a fair daily limit per visitor (3 scans and 1 certificate per day) to keep the tool available for everyone.
Issuing a certificate cryptographically signs your scan result and records it in a tamper-evident, hash-chained ledger, so anyone can independently verify it later at our verify page. You get an embeddable badge to add to your README or site, linking back to that public verification.