How it works

Five layers. One migration plan.

ACD turns scattered cryptography into a prioritised, provable transition to quantum-safe standards.

01

Collect

Scan eleven crypto surfaces — code, binaries, keys, certs, dependencies, TLS, runtime and more.

02

Normalize

Deterministic classification of every asset — never an LLM guessing on the critical path.

03

Identify

A quantum verdict plus Mosca risk per asset: what breaks first, and how badly.

04

Report

A CycloneDX CBOM, a readiness score and a prioritised migration roadmap.

05

Monitor

Drift detection and re-scan — a living inventory that keeps crypto-agility continuous.

Coverage

Eleven surfaces. One inventory.

Cryptography hides in code, binaries, keys, certificates, dependencies and running processes. ACD scans the full estate — not just what's reachable over the network.

Source code
Compiled binaries
Keys & keystores
Digital certificates
Dependencies (SBOM)
TLS endpoints
Runtime (eBPF / DTrace)
Fleet & host inventory
Signed artifacts
Config & secrets
Network services

Architecture

Deterministic by design.

A fixed pipeline from raw surfaces to a verifiable migration plan — no model on the critical path.

Readiness

Prioritised, not just listed.

Every finding lands in a P0–P3 band so you know what breaks first — not just what exists.

P0

Critical — break now

Quantum-broken algorithms on systems carrying long-lived, high-value data. Migrate first.

P1

High — break soon

Vulnerable crypto with a shorter shelf-life, or on regulated / exposed surfaces.

P2

Medium — plan

Legacy but not yet urgent — schedule within the migration roadmap.

P3

Low — monitor

Quantum-safe or already migrated — track for drift, no action needed now.