What is a Post-Quantum Operational Intelligence Platform?

A Post-Quantum Operational Intelligence Platform (PQ-OIP) combines cryptographic validation, real-time monitoring, asset discovery, and protocol scanning into a unified system. Unlike libraries or consultancies, a PQ-OIP provides continuous insight into your cryptographic infrastructure - helping teams assess quantum readiness, monitor crypto health, and migrate to quantum-resistant algorithms with reproducible workflows.

What is post-quantum cryptography?

Post-quantum cryptography (PQC) refers to cryptographic algorithms designed to be secure against attacks from quantum computers. Unlike current encryption methods that could be broken by quantum computing, PQC uses mathematical problems that remain difficult even for quantum computers. PQ Crypta implements NIST-standardized algorithms including ML-KEM-1024, ML-DSA-87, and HQC for comprehensive quantum resistance.

Why do I need post-quantum encryption now?

The threat is immediate due to 'harvest now, decrypt later' attacks where adversaries collect encrypted data today to decrypt once quantum computers become available. Organizations must protect sensitive data with quantum-resistant encryption now to prevent future breaches. PQ Crypta provides operational tools to assess your current cryptographic posture and plan migrations before it's too late.

What algorithms does PQ Crypta support?

PQ Crypta supports 35 cryptographic algorithms including NIST-standardized ML-KEM-1024, ML-DSA-87, SLH-DSA, and the newly approved HQC code-based encryption. Our platform offers classical, pure post-quantum, hybrid transitions, and advanced approaches including FN-DSA signatures and Max-Secure enterprise stacks.

What operational features does PQ Crypta provide?

PQ Crypta provides real-time cryptographic health monitoring, certificate and key discovery across your infrastructure, HTTP/3 QUIC protocol validation, entropy diagnostics, threat detection analytics, and compliance dashboards. Our Discovery Agent scans for PKI assets while the API delivers 588 endpoints for complete cryptographic operations.

How secure is ML-KEM-1024?

ML-KEM-1024 (formerly CRYSTALS-Kyber) is a NIST-standardized algorithm providing security level 5, equivalent to AES-256 against quantum attacks. It uses lattice-based cryptography proven resistant to both classical and quantum computing attacks, making it suitable for top-secret classified information protection.

Can I integrate PQ Crypta into my application?

Yes, PQ Crypta provides REST APIs at https://api.pqcrypta.com with 588 endpoints covering encryption, decryption, key generation, streaming, analytics, and compliance operations. We support multiple programming languages with SDK examples and offer developer documentation for seamless integration.

What is hybrid cryptography?

Hybrid cryptography combines classical algorithms (X25519, Ed25519) with post-quantum algorithms (ML-KEM-1024) for defense-in-depth security. This approach ensures your data remains secure even if one algorithm family is compromised, following NIST recommendations. PQ Crypta's hybrid modes are operationally validated with real-time health monitoring.

Does PQ Crypta offer free PDF tools?

Yes. PQ Crypta's sister site pqpdf.com offers 45 free server-side PDF tools — no account required and zero data retained. Tools include merge, split, compress, rotate, convert to Word, PDF to images, extract text, watermark, sign, redact, flatten, grayscale, repair, reorder pages, delete pages, extract pages, PDF/A conversion, PDF info inspector, and a workflow builder. Security tools include a 20-engine PDF threat scanner that detects malicious JavaScript, embedded files, and auto-open triggers, plus AES-256 and Post-Quantum PQC encryption for PDFs.

How does the PDF threat scanner work?

The PDF threat scanner runs on our sister site pqpdf.com and uses 47 detection engines to analyze PDF files for malicious indicators including embedded JavaScript, launch actions, suspicious URIs, auto-open triggers, embedded executables, and obfuscated streams. It produces a risk score and can sanitize suspicious files server-side. No data is stored after processing.

Can I protect PDF files with post-quantum encryption?

Yes, through our sister site pqpdf.com. Its Protect PDF tool offers both standard AES-256 password protection and Post-Quantum Cryptography (PQC) encryption using ML-KEM-1024. PQC-protected PDFs are saved as .pqcpdf bundles that resist decryption even by future quantum computers. The corresponding Unlock PDF tool can decrypt both AES-256 and PQC-encrypted bundles.

Federal mandate Executive Order 14412 and OMB memo M-26-15 put every agency’s PQC Migration Plan due October 22, 2026 — and phase one is inventory. Start your cryptographic inventory

See, enforce, and adopt post-quantum cryptography across your infrastructure.

A full post-quantum stack, available now. Discover every key, certificate, and weak-crypto call across your estate. Enforce PQC at the edge with a production HTTP/3 proxy. Carry PQC material in your own applications with 35 NIST-standard algorithms.

Discover your estate Binary Format whitepaper Proxy whitepaper

588 API endpoints 35 NIST algorithms Listed in the NIST forensic tool catalog Open source

One stack, three layers

Discover what you have · Enforce PQC at the edge · Carry PQC material in your applications

Start Here

Share a secret

🔐 Encrypt & Share

Deploy the foundation

🛡️ PQCrypta Proxy

Measure your link

⚡ Speed Test 📡 Telemetry Wall

Audit your site

🔭 HTTP/3 Scanner 🔍 PQC Scanner

Inventory your estate

🗺️ Discovery Agent

Test PQC over QUIC

🌊 Streaming Tester

Cryptographic Discovery & Migration Full capabilities →

🗺️

Discovery Agent

Read-only cross-platform Rust agent — inventories every certificate, key, keystore, live-TLS endpoint, appliance store, and weak-crypto call in your source. Classified by real NIST OIDs and mapped to remediation ownership, so teams see what's actionable today vs. vendor-blocked.

CBOM Full X.509 PQC Readiness Linux · Windows · macOS

→

📋

Compliance Dashboard

Where the inventory lands: device-scoped migration status, algorithm compliance, certificate lifecycle, urgent migrations, and keystore drill-down — plus a report builder that exports print-ready PDF, CSV, or JSON with a filter-scoped executive summary.

Inventory Reports Remediation Ownership

→

QUIC & WebTransport Suite Read the Whitepaper →

🛡️

PQCrypta Proxy

Open-source HTTP/3 reverse proxy — the transport layer every tool in this suite runs on. QUIC, WebTransport, ML-KEM-768 PQ-TLS.

H3 WebTransport Open Source ML-KEM

→

⚡

Speed Test

QUIC vs TCP: genuine datagrams and WebTransport streams measuring latency, jitter, and throughput

QUIC Datagram WebTransport

→

🔭

HTTP/3 Scanner

Grade any domain's HTTP/3 deployment: QUIC v1 and v2, Encrypted Client Hello, post-quantum TLS, 0-RTT, MASQUE, multipath, HTTPS DNS records and the certificate chain

Scanner QUIC H3

→

🧪

H3 Conformance Suite

A server that misbehaves on purpose, so your HTTP/3 client library can find out how it copes. 27 adversarial tests, each citing the RFC clause it exercises, with results published for five real implementations

H3 QUIC 27 tests CI

→

🔍

PQC Readiness Scanner

Audit TLS endpoints for ML-KEM support and hybrid key exchange readiness

Scanner ML-KEM TLS

→

🌊

Streaming Encryption

WebTransport-powered PQC encryption with full-duplex streams and chunked delivery

WebTransport Duplex PQC

→

📡

Telemetry Wall

Six independent QUIC streams visualising real-time RTT, jitter, and packet loss in isolation

Live WebTransport 6 Streams

→

🔐

JA4 Fingerprint Directory

1,904 TLS fingerprints, 179 curated and 1,725 observed on this edge, each JA4 decoded into the handshake properties it encodes and each JA3 decoded back into named cipher suites and extensions

JA4 JA3 Open data

→

🪞

Handshake Mirror

Your own TLS handshake, read back to you: the JA4 your browser just presented, and whether the key exchange it chose is post-quantum or merely secure against today's adversaries

Your JA4 ML-KEM Live

→

🕳️

MASQUE Relay

A free public CONNECT-UDP endpoint over HTTP/3, RFC 9298, plus a complete reference client short enough to read in one sitting. There is almost nowhere else to point a CONNECT-UDP client

RFC 9298 CONNECT-UDP Reference client

→

Open Source

🛡️ PQCrypta Proxy Foundation of this suite — featured above ↑ 📖 Docs 📂 GitHub →

📦