Full findings, certificate chain analysis, migration roadmap & PDF report.
Generate access link
Valid for 14 days. The same link can be used multiple times within that window. Recipient email alone is enough. If you don't know their email, provide your email, their name and organisation.
Access link
Copied
Valid for 14 days. Forward to your team or open on any device to begin the assessment.
Scan TLS endpoints and get an executive risk snapshot, findings, and migration roadmap.
Scanning endpoint…
Scanning…
Quantum Exposure Score
0
Ready
TrendStable
Algorithm Exposure
RSA
0%
ECDSA
0%
PQC
0%
Readiness0%
Overall Risk
Endpoint
Scan Journey
Step details
Click a stage to view what is checked.
Scan Time
-
Risk
Phase
Search
Migration Roadmap
View raw roadmap text
Related Services
Keystone
Keystone is Synthesis' enterprise cryptographic services platform and HSM integration layer, with secure key lifecycle management and a unified API across Thales Payshield and AWS Payment Cryptography.
HSM Advisory & Reseller
Synthesis is a registered reseller for Thales and Entrust, with certified expertise across the full HSM lifecycle: device selection, procurement, architecture, and migration planning.
Crypto Ops Managed Services
Synthesis provides ongoing expert management of your cryptographic environment, covering HSM operations, key management, compliance monitoring, and incident response.
Analyse X.509 certificates. Paste PEM text or upload a certificate file.
Scan policy: Suitable for leaf and domain certificates (non-production: NFT, SIT, UAT; or public-facing TLS). Do not paste private keys, CA certificates, or full certificate chains. Use the pqc-scan CLI for keystores (.p12, .jks) and production secrets.
Drop a certificate file here
Supported: .pem, .crt, .cer. Click to browse.
.p12, .pfx, .jks, .p7b require the CLI tool (password-protected)
Analysing certificate…
pqcscanby SynthesisCertificate Risk Assessment
Root or self-signed certificate detected. The subject and issuer are identical, indicating this may be a CA root or self-signed cert.
Root certificates should generally not be shared through web tools. If this is a production CA certificate, analyse it offline using the CLI.
Certificate Exposure Score
0
Ready
Findings0
Top Risk Driver
-
Run an analysis to see key risk drivers.
Overall Risk
Expires
Signature
-
Serial Number
-
SAN Entries
-
OCSP Responders
-
Subject
Issuer
Key Algorithm
Key Size
Related Services
Keystone
Keystone is Synthesis' enterprise cryptographic services platform and HSM integration layer, with secure key lifecycle management and a unified API across Thales Payshield and AWS Payment Cryptography.
HSM Advisory & Reseller
Synthesis is a registered reseller for Thales and Entrust, with certified expertise across the full HSM lifecycle: device selection, procurement, architecture, and migration planning.
Crypto Ops Managed Services
Synthesis provides ongoing expert management of your cryptographic environment, covering HSM operations, key management, compliance monitoring, and incident response.
Analyse a cryptographic bill of materials. Paste a CycloneDX CBOM or scan a GitHub repository directly.
Analysing CBOM cryptographic assets…
pqcscanby SynthesisCBOM Risk Assessment
Project
CBOM Spec
Risk Distribution (Severity-Weighted)
Bars show each category's contribution to risk, not asset count. Safe assets have zero risk weight and appear at 0%. Switch to Raw Count to see their share by volume.
Bars show the number of assets at each risk level. Switch to Weighted to see each category's contribution to overall risk.
N/A
Grade: N/A
Critical Findings
No matches found.
Primitive Exposure
No primitive data detected.
Primitive
Search
Cryptographic Asset Inventory
Baseline Comparison (paste a prior CBOM to detect cryptographic drift)
Paste a prior CBOM JSON (or saved response JSON) to compare cryptographic-asset changes.
No baseline comparison yet.
Added Crypto Assets
Removed Crypto Assets
Related Services
Keystone
Keystone is Synthesis' enterprise cryptographic services platform and HSM integration layer, with secure key lifecycle management and a unified API across Thales Payshield and AWS Payment Cryptography.
HSM Advisory & Reseller
Synthesis is a registered reseller for Thales and Entrust, with certified expertise across the full HSM lifecycle: device selection, procurement, architecture, and migration planning.
Crypto Ops Managed Services
Synthesis provides ongoing expert management of your cryptographic environment, covering HSM operations, key management, compliance monitoring, and incident response.
Select the regions where you operate and your business sectors. The calculator derives the lowest common denominator PQC baseline that satisfies all selected jurisdictions, shows your readiness gap from your questionnaire results, flags conflicts, and lists the relevant regulations for your selection.
