Adversaries are already capturing encrypted traffic and stockpiling it for the day quantum computers arrive. pqcheck.com tells you in seconds how much of your data unlocks when one of those harvested keys finally gets decrypted — using the Decryption Blast Radius Score, the only unit of measure built specifically for harvest-now risk.
Enter your favourite site to find out:
Free · No signup · Anonymous · What is this?
Every other PQC scanner answers a yes/no question: "is post-quantum crypto enabled?" That’s the wrong question. The HNDL question is how much past + future data unlocks when one harvested key gets decrypted. That’s a continuous score, not a checkbox — and pqcheck.com is the only tool built around it.
npx pqcheck <domain> in your terminal.Type a domain above to see how exposed it is. Results are based on public TLS configuration only — the full pqcheck scanner launches soon.
Quantapact is a stealth-mode venture building tools that measure quantum-decryption risk to the world’s most sensitive data. The first product is pqcheck.com: a free public scanner that gives any website a Decryption Blast Radius Score — the unit of measure for harvest-now-decrypt-later risk. The score above is a representative preview computed from your domain’s public characteristics. The full scanner (including real-time TLS handshake inspection, CT-log subdomain enumeration, and continuous monitoring) ships with the public launch — sign up above to be notified.
Harvest-now-decrypt-later (HNDL) isn’t hypothetical. Nation-state SIGINT programs have been documented capturing and storing encrypted traffic at internet exchange points and undersea cables for years. The math says a cryptographically-relevant quantum computer arrives somewhere between 2030 and 2040 — and any encrypted record harvested before then becomes plaintext the moment it does. If your data still matters in 2038, your encryption needs to matter today.
The data with the longest sensitivity decay — medical records, financial histories, intelligence files, intellectual property — is also what adversaries care most about preserving for later. Banking sessions decrypted in 2038 still matter. PHI decrypted in 2038 still matters more.
pqcheck.com is the public-facing scanner. Behind it, we’re building Tessera — a patented post-quantum handshake protocol designed for the byte-constrained channels that NIST’s ML-KEM (768–1568 bytes per exchange) physically can’t fit: BLE, NFC, LoRaWAN, MQTT, V2X, payment terminals, medical-device firmware. The protocols where there is no room for a 1.5KB handshake.
The Tessera SDK is patent-protected and in active development. Public launch is post-MVP — once pqcheck has demonstrated the demand for harvest-now risk measurement, the SDK becomes the natural remediation layer.
Quantapact is a stealth-mode venture building tools that measure quantum-decryption risk to the world’s most sensitive data. The underlying handshake protocol behind Tessera is patent-protected via a US provisional application, with non-provisional conversion in progress. The founding team combines clinical-medicine and cryptographic-systems backgrounds, with healthcare as the initial vertical focus. Public team identification will follow product launch.