PQCAT / CONNECTED CRYPTOGRAPHIC INTELLIGENCE
From an asset list to cryptographic relationships.
Bring multiprotocol network discovery and software cryptography into one topology and assessment workflow.
01 / TOPOLOGY
Which systems depend on this cryptography?
Explore relationships among hosts, services, configurations, certificates, CAs, business systems and code projects from four starting points.
- Trust chain: trace root CAs to services and hosts.
- Communications: understand internal and external dependencies.
- Algorithms: follow purposes into configurations, certificates and code.
- Business systems: connect deployment scope, ownership and risk.
Relationships need evidence. Software deployment links require source evidence or manual confirmation.
02 / NETWORK DISCOVERY
Discover more than HTTPS.
Use handshake and protocol metadata from network traffic, complemented by active TLS probing within an authorised scope.
- Multiprotocol discovery including TLS/HTTPS, SSH and IKE/IPsec.
- Distinguish negotiated use, offered capabilities and active probe results.
- Trace certificates, key exchange, authentication and symmetric encryption.
Visibility depends on protocol, capture position and handshake completeness. Unknown does not mean risk-free.
03 / SOFTWARE CBOM
Trace cryptographic use to source code.
Identify algorithms and cryptographic APIs, create software CBOMs and help developers and security teams assess replacement scope.
- Retain source files, line numbers and analysis evidence.
- Distinguish cryptographic CBOMs from package-oriented SBOMs.
- Link confirmed deployments to hosts and network observations.
A code finding does not prove deployment or runtime use. Coverage depends on language, framework and input completeness.
04 / GOVERNANCE
Turn findings into a shared basis for governance.
Bring inventory, findings, references and open questions together to inform phased post-quantum migration.
- Reference FSC, NIST, Japanese and Southeast Asian guidance.
- Network assessment reports in Traditional Chinese, English and Japanese.
- DOCX, PDF and HTML reports with data tables for delivery.
A framework crosswalk is not compliance certification. Report types and formats depend on the product version.