Skip to main content
Microsoft
separator
https://catalogartifact.azureedge.net/publicartifacts/qcryptoninc1788706847984.qcrypton-pqc-shield-30968b85-5731-4c5b-93c5-96b5b488bb08/image3_large280216x216.png

QCrypton PQC Shield

by QCrypton, Inc

Deploy a PQC scanner into your Azure VNet. Findings flow into Microsoft Sentinel.

Quantum computers will break RSA and elliptic-curve cryptography. NIST has standardized post-quantum algorithms (ML-KEM, ML-DSA, SLH-DSA), federal mandates (NSM-10, CNSA 2.0) require migration, and long-lived data encrypted today can already be harvested for later decryption. Your first step is knowing where classical crypto lives in your Azure estate.


QCrypton PQC Shield deploys a scanner agent inside your Azure Virtual Network — as an Azure Container App — and continuously inventories quantum-vulnerable cryptography across your subscription. Findings stream into Microsoft Sentinel via a Data Collection Rule and land in the custom table, ready for triage, analytics rules, and workbooks that ship with the same deployment.


What the scanner discovers:

  • Azure Key Vault key posture (RSA/ECC vs. PQ-hybrid) and CMK provenance
  • TLS certificate signature algorithms on public endpoints, App Services, and Application Gateways
  • Storage Account and App Service minimum TLS version configuration
  • Certificates expiring after 2030 still signed with quantum-vulnerable algorithms — the primary harvest-now-decrypt-later risk vector
  • New quantum-vulnerable resources appearing since the previous scan

  • Everything is deployed into your subscription: Virtual Network, Container App Environment + Container App agent, User-Assigned Managed Identity with Reader scope, Log Analytics Data Collection Endpoint + Rule, and the full Microsoft Sentinel solution — Data Connector, 5 Analytic Rules, PQ Readiness Workbook, and a Teams-notification Playbook. Nothing leaves your tenant.


    Typical cost under $10/month — Container Apps Consumption plan (no idle charges) plus minimal Log Analytics ingestion. QCrypton licensing is BYOL via your existing QCrypton account; the scanner reports findings back to your QCrypton dashboard for cross-cloud correlation with the QCrypton PQC Scanner SaaS.


    Get started in minutes: click Create, enter your QCrypton API key, choose your Sentinel workspace, and the agent begins scanning.

    At a glance

    https://catalogartifact.azureedge.net/publicartifacts/qcryptoninc1788706847984.qcrypton-pqc-shield-30968b85-5731-4c5b-93c5-96b5b488bb08/image1_screenshotarchitecture.png
    English (United States)
    Your Privacy Choices Opt-Out Icon Your Privacy Choices
    Consumer Health Privacy Sitemap Contact Us Privacy & Cookies Terms of Use About our ads Manage cookies