The quantum threat is real
are you ready to migrate?
Outdated algorithms often hide deep in your stack. SCANOSS makes them visible.
of organizations have a quantum roadmap. [1]
Most organisations are running outdated or export-sensitive encryption
SCANOSS detects hidden cryptographic functions and helps you build CBOMs to prepare for post-quantum compliance.
You can’t migrate what you haven’t identified.
The coming wave
Detect hidden crypto
Build CBOMs
Flag risky algorithms
Track crypto agility
Monitor encryption usage and remediation progress across teams and projects.
If you don’t know what encryption your software uses, you’re already behind. SCANOSS gives you the clarity and visibility to act now.
Quantum readiness timeline
Governments have set deadlines, standards are finalised, and export controls are already in place. Yet most organisations still rely on undocumented encryption like RSA‑1024 and SHA‑1, lack CBOMs, have no migration plan, and remain vulnerable as quantum-capable adversaries begin harvesting encrypted data today.
| Year |
|---|
|
2024 |
|
2025 |
|
2026 |
|
2027 – 2029 |
|
2030 |
| Milestone | What it means | Where SCANOSS helps |
|---|---|---|
|
NIST finalises ML-KEM, ML-DSA and SLH-DSA standards. |
Planning begins for migration. |
Detect use of outdated algorithms such as SHA-1 and RSA-1024. |
|
Vendors release PQ-safe crypto libraries. |
Teams must assess upgrade feasibility. |
Generate CBOMs and prioritise replacement efforts. |
|
Compliance plans expected in regulated sectors. |
Inventory and risk disclosure become mandatory. |
Provide crypto usage reports and audit trails. |
|
Broad migration to post-quantum cryptography; industry analysts treat 2029 as the practical completion target. |
Migration lead times mean readiness must land ahead of NIST’s 2030 date. |
Monitor algorithm usage and track remediation progress. |
|
NIST’s deprecation deadline for RSA-2048 and ECC P-256 takes effect. |
Continued use requires a documented risk justification. |
Use SCANOSS CBOMs to evidence migration progress. |
How it works
Integrate in your workflow
SCANOSS is engineered for straightforward integration into any development environment.
Scan source code
Encrytpion Dataset
SCANOSS enriches scan results with: algorithm name, strength and compliance status.
Track your crypto agility over time
Use your CBOM as a living baseline to monitor encryption usage, guide upgrades, and demonstrate readiness.
