For security teamsEngagements

Engagements for security teams.

Two questions slow every post-quantum migration: where the vulnerable cryptography is, and how much security margin the new schemes actually give. We work on both, with the same engine.

Systems
AgadesEvolve · SecAgent
Deployment
Offline, on your premises
Reporting
NIS2, DORA
Contact
[email protected]
01The problemTwo blind spots
AInventory

Where is the vulnerable cryptography?

RSA and elliptic curves are buried in application code, dependencies and binaries. Pattern-based scanners see direct calls, but far less the indirect paths and home-grown implementations.

Direct calls
Seen by pattern scanners
Indirect paths
Far less visible
Home-grown implementations
Far less visible
BEvaluation

What is the real security margin?

The concrete security of ML-KEM and ML-DSA rests on cost estimates for the best known attacks. These estimates evolve with research, and exploring them remains largely manual.

Schemes
ML-KEM, ML-DSA
Security basis
Best-known-attack cost estimates
Exploration
Largely manual
02What we deliverOpen core · engagements
Engagements
  • CampaignsAgadesEvolve campaigns on your target schemes and parameters
  • Migration planPrioritized post-quantum migration plan from a CBOM with evidence
  • ReportingNIS2 and DORA reporting
  • DeploymentOffline, on your premises
Open source
  • Agades PQC GymBenchmark for attack strategies on LWE/MLWE
  • SecAgentSecurity analysis through the code graph
  • DetectionVulnerable cryptography detection

Why openTrust and peer review

Who we work with

  • CISOs of mid-size and large enterprises
  • Cyber integrators
  • Aerospace
  • Space
  • Defense
03How it runsSecAgent pipeline

From binary to migration plan.

Offline, without an LLM, replayable. Every finding carries a status, and what is not proven stays unknown.

  1. Inputsfirmware, binaries, protocols
  2. Ingestionbyte lineage, fingerprints
  3. Analysisbinary IR, CFG, identified crypto
  4. CBOMCycloneDX, with evidence
  5. Exposurecode, protocols, equipment
  6. Migrationsigned debt, exact Pareto plan
re-scan after migration · independent verification of closure
Post-quantum migration for IoT fleets Questions on migration deadlines and CBOM Glossary
04ContactPilots

Start with one fleet, one scheme.