About this tool

PQ Migration Readiness is a free tool published by Symbolic Software. It exists to help engineers and architects make a clear, opinionated assessment of their post-quantum migration progress.

What it does

Two things, optionally combined:

• A 12-question scorecard, processed entirely in your browser, that scores six dimensions of post-quantum readiness.
• A live scanner that probes a TLS or SSH host you specify and reports the algorithms it offers.

What it does not do

• It does not store personally identifying information. The scorecard does not require an email. The scanner records no logs beyond the source IP for rate-limiting.
• It does not constitute a security audit. Use it as a map, not a guarantee.

Data we keep

If you generate a report, we store its contents (your self-reported answers and any scan findings) for 30 days in a SQLite database, indexed by an opaque random token, so the report URL is shareable. After 30 days the row is deleted.

For the scanner: we keep an in-memory rate-limiter window keyed by your IP for one hour. No persistent log of scan targets is kept.

If you see our scanner in your logs

The scanner runs from Fly.io machines. If you observe probes from this service in your TLS or SSH logs, the source IPs belong to Fly's IP ranges; the user-agent / SSH banner identifies as PQ-Migration-Scanner.

Read the playbook

This tool is a companion to the Post-Quantum Migration Playbook — a longer document covering primitives, hybrid constructions, TLS migration, library landscape, conformance testing with Crucible, rollout strategy, and a gallery of bug classes from real audits. Download the PDF →

Contact

If you'd like our help with a specific migration, email get in touch.