Start free. Scale up.
Every paid tier includes a dedicated lead consultant and ends with a roadmap your teams can execute.
Explore
See which algorithms your code uses.
- One source archive
- CycloneDX CBOM by email
- Quantum risk tags
- Summary report
Baseline
For mid-sized organizations starting out.
- Full CBOM across code and infrastructure
- Certificate and algorithm inventory
- Risk classification
- Executive roadmap
- 3–4 weeks
Assurance
For larger estates and regulated sectors.
- Everything in Baseline
- Full cryptographic audit
- HSM and key management review
- Q-Readiness Index scoring
- Findings workshop
- Detailed migration roadmap
Program
For enterprise-wide transformation.
- Everything in Assurance
- Third-party and supply-chain scope
- Quarterly re-scans
- Migration support
- Team training
- Program management
Prices in USD, excluding applicable taxes. If discovery finds more assets than your tier covers, we’ll agree options with you before doing any extra work. Typical billing is 50% at kickoff and 50% on delivery. Discounts are available for non-profits, education, and federal, state and local agencies.
Training and deal work.
Available on their own or alongside any assessment.
| Service | Format | From |
|---|---|---|
| Executive briefing | 90 minutes, up to 12 people | $2,000 |
| Engineering or audit workshop | Half day, up to 12 people | $4,500 |
| Migration planning lab | Full day, facilitated | $8,000 |
| M&A due diligence | Report and deal-team call | $6,500 |
| Q-Readiness Index re-score | Annual, after a first assessment | $5,000 |
About pricing.
What counts as a protected asset?
A server running applications, a container image or a source code repository that uses cryptography. Network devices and SaaS integrations are counted once per product, not per instance.
Is anything on site?
Baseline and Assurance are delivered remotely. On-site work is available in the Program tier or as an add-on at cost.
What if we don’t know how many assets we have?
Run the free scan or book a 30-minute scoping call. We’ll estimate the tier before you commit.