PQC Triage: find the cryptography a quantum computer breaks first

Description and use

PQC Triage is a triage tool that prioritizes cryptographic dependencies for post‑quantum migration, providing deterministic scoring, audit trails, and exportable migration plans.

Problem

Security teams need to prioritize which cryptographic dependencies to migrate first, but existing tools focus on algorithm weakness rather than migration urgency.

Outcome

PQC Triage provides a deterministic, auditable triage workflow that reduces migration planning time to about ten seconds and ensures decisions are traceable and verifiable.

Workflow

• Paste a package.json, requirements.txt, go.mod, Cargo.toml or pom.xml into the web app
• PQC Triage parses the manifest, resolves cryptographic call sites, and reports surfaces enriched from deps.dev and OSV
• Set quantum‑capability horizon and per‑surface data shelf life via the policy interface
• Persist decisions in Postgres and generate a sealed migration plan
• Download the plan as Markdown, JSON or CSV for audit and review

Evidence

Paste a dependency manifest, see which cryptography a quantum computer breaks first, and download a sealed migration plan.

Source

Every security team running post‑quantum migration has the same problem, and it is not a cryptography problem. It is a triage problem.

Source

The whole primary path is a real import, a real score, a real persisted decision, and a downloadable plan — about ten seconds.

Source

130 unit tests, tsc --noEmit and eslint clean, production build green.

Source