Skip to main content
CMDashCybersecurity Maturity Dashboard
← All landscape areas
Emerging / Frontier · Situational

Post-Quantum Cryptography (PQC)

Prepares cryptography for quantum threats.

9 options listedTypical cost: $20k-$250k/yrGOVERN (GV) / PROTECT (PR)

PQC efforts inventory cryptographic assets and migrate them to NIST-standardized quantum-resistant algorithms, emphasizing crypto-agility. Driven by 'harvest-now, decrypt-later' risk and federal mandates (e.g., quantum-readiness directives). Today it is mostly assessment, consulting, and crypto-discovery tooling rather than turnkey products. Overlaps heavily with PKI and key management.

Inventory crypto now, migrate later; low near-term urgency for most.

  • Gets ahead of harvest-now-decrypt-later risk
  • NIST standards finalized
  • crypto-discovery tooling emerging
  • aligns with federal mandates.
  • Mostly assessment/consulting today, not turnkey
  • migration is multi-year and crypto-agility is hard
  • low near-term urgency for many.
PQShieldCommercial

Post-quantum cryptography solutions.

Visit site →
SandboxAQCommercial

Quantum-safe crypto + crypto discovery.

Visit site →
ThalesCommercial

HSM, key management and encryption (Luna/CipherTrust).

Visit site →
EntrustCommercial

PKI, HSM and identity; certificate + crypto.

Visit site →
DigiCertCommercial

Public CA + certificate lifecycle automation.

Visit site →
Open Quantum Safe (liboqs)Open source

PQC algorithm library (OQS).

Visit site →
BoringSSL PQCOpen source

Google TLS library with PQC support.

Visit site →
KeyfactorCommercial

PKI/certificate-lifecycle platform adding PQC discovery and crypto agility.

Visit site →
Cloudflare CIRCLOpen source

Cloudflare's open-source Go library for PQC and ECC primitives.

Visit site →
Post-Quantum Cryptography (PQC) — Cybersecurity Landscape Atlas — CMDash