No. TLS is one of eleven surfaces. ACD also finds keys, certs, hard-coded crypto in code and binaries, dependencies, runtime usage and more — the full cryptographic estate, not just what's exposed to the network.

A lightweight collector runs where you point it — a directory, a host, a fleet. Runtime visibility uses eBPF on Linux and DTrace on macOS, so coverage is broad without invasive installs.

Days, not months. We scope one system, run the discovery, and hand you a real readiness score and roadmap — the same artefact a full engagement produces.

ACD maps directly to the HKMA whitepaper's immediate asks: commission a cryptographic inventory, gain system-level visibility, prioritise exposure, and build for crypto-agility. It's the discovery and planning layer — not the migration itself.

No — and we're upfront about that. ACD discovers and plans; it produces the roadmap you execute with your own teams or migration partners. We'd rather be honest about the boundary than over-promise.