Upload
Your turn.
We read your code, find cryptographic calls and libraries, and classify each one. Results arrive by email, usually within an hour.
- Encrypted in transitUploads travel over TLS to an isolated scanning environment.
- Never kept or sharedYour code is used only to produce your report.
- Deleted within 24 hoursSource archives are erased after processing.
What you get
A CBOM in your inbox.
A standard CycloneDX file you can load into your own tools, plus a short summary written for humans.
In the report
- Algorithm inventoryHashes, ciphers, key exchange and signature schemes found in your code.
- Quantum risk tagsVulnerable, weakened or resistant, with an urgency rating.
- LocationsFile and line references for every finding.
Languages
Python, Java, Kotlin, Scala, Go, Rust, C, C++, C#, JavaScript, TypeScript, PHP, Ruby, Swift, Objective-C, Dart, Elixir, Erlang, Haskell, Lua, Perl, R, Shell, PowerShell, Solidity and more.
| Included in the free scan | Free | Paid CBOM |
|---|---|---|
| Cryptography in your own source code | ✓ | ✓ |
| Third-party and open-source dependencies | – | ✓ |
| Certificates, TLS endpoints, HSM and KMS | – | ✓ |
| Production reachability analysis | – | ✓ |
| Cryptographer review and migration plan | – | ✓ |