PacketQC SaaS

PacketQC is a suite of modular tools to help organizations and their service providers discover, diagnose, track and verify their cryptographic assets in use across the organization and in 3 party domains. Such cryptographic assets include:

• Cryptographic keys – secret keys, asymmetric keys, API keys
• Digital certificates – identity certificates, TLS certificates, API certificates
• Algorithms – Insecure cipers, classically secure ciphers, quantum-safe ciphers
• Protocols – HTTPS, API over TLS, SSH, IPSEC, etc

PacketQC operates in an agentless mode where it receives the following information to carry out its analysis:

• Network packet capture (PCAP, PCAPNG)
• Product Cryptographic Bill-of-material (CyclonDX JSON)
• SIEM dump (JSON)

The features of PacketQC are:

1. Cryptographic identification. PacketQC analyzes the data provided to retrieve cryptographic information to display information on which cryptographic algorithms are used.
2. Protocol validation. The cryptographic information is supplemented with a colour-coded categorization of ciphers that are “Insecure”, “Classical Secure” and “Quantum Secure”.
3. Asset identification. PacketQC can also provide an asset view of the different devices communicating in the network, and retrieve cryptographic information used by the asset, including analyzing the CBOM.
4. Project prioritization. With the assets and network protocols identified, PacketQC can provide the administrator with an overview of the extent of post-quantum implementation, and support decisions on where to focus next for migration.