// Post-quantum readiness scanner

Find the encryption quantum computers will break — before someone else does.

Tomorrow's quantum computers will crack today's encryption — and data stolen now can be decrypted later. QuantumSafe scans your code for the at-risk cryptography (RSA, ECC, and legacy algorithms), scores your exposure 0–100, and gives you the NIST-approved replacement for each (FIPS 203/204).

Scan your code — free ↓ View on GitHub ↗

No install, no account — paste code, drop in a GitHub link, or upload a .zip · AST + regex across 11 languages · SARIF & CBOM export

Prefer the terminal or CI/CD? pip install quantumsafe-scan

quantumsafe — scan

$ quantumsafe scan --repo github.com/acme/payments-api cloning · scanning 1,284 files QUANTUM RISK SCORE 82/100 CRITICAL FILE LINE ALGORITHM RISK auth/keys.py 14 RSA-2048 HIGH auth/keys.py 27 ECDSA HIGH tokens.py 8 MD5 HIGH net/tls.py 33 TLS 1.0 MEDIUM cache.py 51 SHA-256 LOW → replace RSA/ECC with ML-KEM (Kyber) · FIPS 203

illustrative output — run the real scanner below ↓

// Scan — free, no account

Scan your code for quantum-vulnerable cryptography.

Paste a snippet, point at a GitHub repo, or upload a .zip. You get a 0–100 risk score, every finding pinned to file & line, and the NIST-approved fix — exportable as SARIF or CBOM. Nothing is saved unless you create a free account.

Live preview runs in your browser. “Run full engine” uses the real scanner.

Quantum Risk Score

out of 100

No code scanned

0–30 Low31–60 Med 61–80 High81–100 Crit

HIGH 0 MED 0 LOW 0

This scans one snippet in your browser. Use the GitHub repo or .zip tab above to scan a whole codebase — still no account. A free account only adds saved scan history, email alerts, and a CLI key.

// What it flags

Every algorithm Shor and Grover put at risk.

Across 11 languages — Python (AST-aware), JavaScript, Go, Java, Ruby, C#, PHP, Rust, C/C++, Kotlin, Swift.

HIGH

RSA · ECDSA · ECDH · DSA · Diffie-Hellman · MD5 · SHA-1

Broken outright by Shor's algorithm, or already collision-broken. Migrate now.

MEDIUM

TLS 1.0 / 1.1 · 3DES · RC4 · RSA < 2048

Deprecated or weakened — schedule a replacement.

LOW

SHA-256 · AES-128 · TLS 1.2

Grover halves their effective strength — safe today, size up for long-lived data.

// How it works

Code to migration plan, in three steps.

Point it at your code

Paste a snippet, drop in a GitHub link, or upload a .zip — all in the browser. (A CLI is there too, for terminals and CI/CD.)

Get a risk score

A 0–100 Quantum Risk Score, with every finding pinned to its file and line.

Follow the plan

NIST-mapped fixes — Kyber, Dilithium, SHA-3, AES-256 — exportable as SARIF or CBOM.

Or run it in CI

The reusable GitHub Action scans every push and uploads SARIF to your repo's Security tab. Detection is AST-aware for Python plus regex for the other 10 languages — not a blind grep.

# .github/workflows/quantumsafe.yml
- uses: Danny-397/Quantum-Safe@main
  with:
    path: .
    fail-on-high: true

Free, open source, ready to scan.

Every feature works without an account. Sign up only to save your scan history and get email alerts on HIGH-risk findings.

Based on NIST PQC standards · FIPS 203 / 204 / 205

Scan now — no account View source