Manager
IBM Quantum Safe Cryptography Manager
A centralized inventory of cryptographic objects, mapped to the applications and infrastructure that depend on them, with risk and compliance posture in one view.
Read more
Technology
IBM Quantum Safe technology
Crypto-agility starts with visibility. We work with IBM's Quantum Safe portfolio to discover where cryptography lives, assess the risk and move to post-quantum algorithms without breaking what works today.
The portfolio
Three tools, one crypto-agile foundation
Each tool covers a different layer: the enterprise inventory, the application source code, and the network traffic between clients and servers.
QSE
IBM Quantum Safe Explorer
Scans application source code for cryptographic artifacts, vulnerabilities and crypto-agility anti-patterns, and produces a Cryptography Bill of Materials.
Read moreProxy
IBM Quantum Safe Proxy
An adaptive proxy that lets legacy and post-quantum-ready clients and servers talk to each other, without changing application code.
Read more
Inventory & posture
IBM Quantum Safe Cryptography Manager
Cryptography Manager builds a centralized inventory of cryptographic objects and their metadata: type, subtype, location and more. It maps dependencies between logical assets such as applications, software and databases, and physical assets such as servers, storage and networking devices.
On top of that inventory it evaluates your cryptographic posture, assesses risk and aligns your compliance posture against global standards such as NIST, GDPR and PCI-DSS.
Opens IBM's registration page. We can help you set up the trial and interpret the results.
Key capabilities
- Discovery of keys, certificates, secrets, algorithms and SSH public keys across on-premises and cloud environments
- Detection of unknown or shadow cryptography, with ownership, usage and dependency mapping
- Integrations with Nmap, Kubernetes, Qualys, Jira and ServiceNow, plus import of Quantum Safe Explorer findings
- Policy engine with compliance tags and control IDs, PQC-readiness assessment and audit-ready reporting
- Key and certificate lifecycle management: issuance, rotation, renewal and revocation, with automated renewals
- Centralized key management for transparent database encryption
Source code
IBM Quantum Safe Explorer
QSE discovers cryptographic artifacts, vulnerabilities and crypto-agility anti-patterns in source code, and uses those insights to guide code updates.
Scans are automated and integrated in the application's CI/CD build pipeline, so they become part of regular DevSecOps routines with near-zero manual effort. For every repository scanned, QSE generates a Cryptography Bill of Materials (CBOM).
Key capabilities
- CBOM output based on the CycloneDX 1.6 standard, covering algorithms, protocols, certificates and libraries
- API discovery that pinpoints where cryptographic functions are used across large codebases
- Parameter tracing to expose hard-coded keys, weak algorithms and improper API usage at line level
- Portfolio View dashboard with findings grouped by severity across applications and business units
- Compliance checks reporting quantum-safe and FIPS 140-3 status for supported assets
Network & traffic
IBM Quantum Safe Proxy
Quantum Safe Proxy is an adaptive proxy and performance test harness. It handles both legacy and post-quantum-ready clients and servers, enabling backward compatibility and interoperability without changing application code.
That makes it possible to protect traffic against "harvest now, decrypt later" while applications are still being migrated.
Key capabilities
- Quantum-safe protection for applications and endpoints without code modifications
- Interoperability between legacy and post-quantum-ready systems during migration
- Centralized control over TLS protocols and policies
- Performance test harness to measure the impact of post-quantum algorithms
Built on standards
IBM helped write the new standards
3
NIST-approved PQC algorithms co-developed by IBM
- ML-KEM
- ML-DSA
- SLH-DSA
4
IBM-supported signature schemes under NIST evaluation
- SQIsign
- UOV
- MAYO
- FAEST
Source: NIST, August 2024
From tool to outcome
How the tools fit our services
Tools do not make you quantum-safe on their own. We put them to work inside a structured approach.
01
Discovery & inventory
Cryptography Manager and Quantum Safe Explorer build the cryptographic inventory and CBOM that every migration decision depends on.
Discovery service02
Migration
Quantum Safe Proxy protects traffic and bridges legacy and post-quantum systems while applications are migrated step by step.
Migration service03
Continuous crypto-agility
Cryptography Manager keeps the inventory, policies and key and certificate lifecycle under control long after the first migration.
Crypto-agility serviceVendor-aware, not vendor-locked
We specialise in IBM Quantum Safe, and we also know the alternative tooling in the market, so recommendations start from your environment rather than a product list.
- Keyfactor / AgileSec
- SandboxAQ AQtive Guard
- Fortanix
- AppViewX
- QuSecure
- Palo Alto / CyberArk certificate management