The deadlines
The same physics that makes quantum computing powerful will break RSA and ECC. Governments have already decided what happens next and published the dates. The first of them — a complete cryptographic inventory and migration plan — is closer than most organisations realise.
Complete a full discovery and assessment exercise across your estate, and produce an initial migration plan.
Source: ncsc.gov.uk ↗Complete your highest-priority migration activities and ready your infrastructure for full transition.
Source: ncsc.gov.uk ↗Complete migration to post-quantum cryptography across all systems, services and products.
Source: ncsc.gov.uk ↗The dates are not ours. They are the ones your auditors, insurers and procurement teams will use.
NCSC, Timelines for migration to post-quantum cryptography.
Where most organisations should start
Discovery is the slowest phase of any cryptographic migration, and it carries the nearest deadline. UK organisations are expected to have completed a full discovery exercise and drafted a migration plan by 2028. US federal high-value assets must be migrated for key establishment by the end of 2030 and for digital signatures by the end of 2031. CISA and NIST are due to publish the minimum elements of a Cryptographic Bill of Materials in early 2027.
None of that requires a quantum computer. It requires knowing what cryptography you actually run, and in what order to fix it.
A complete inventory of the cryptography in your estate — algorithms, key lengths, certificates, libraries, protocols and third-party dependencies — across code, cloud, network and on-premises systems.
You receiveA phased, sequenced plan mapped at the same time to NIST IR 8547, EO 14412 and OMB M-26-15, CNSA 2.0 where it applies, and the NCSC 2028 / 2031 / 2035 phases.
You receiveThe delivery work after the plan: hybrid TLS, certificate and PKI re-keying, HSM assessment, removing hard-coded algorithms, and PQC policy gates in your CI/CD pipeline.
Why it mattersAlso available: QKD Reality Check · Q-Ready Workshop · Quantum Threat Brief See all six →
If this is relevant to your organisation, get in touch and we’ll discuss scope, engagement model and pricing.
Request a CBOM assessmentWe publish our work
Our product direction comes out of published, peer-reviewed research in post-quantum cryptography, secure cloud architecture, quantum-AI for industrial systems and clinical machine learning. Every claim we make about the science resolves to a paper you can open.
The full public record is at ORCID 0000-0002-0717-5888. Where a paper is applied-AI work rather than quantum research, we label it as such.
Senapati & Rawal · Cyber Security and Applications (Elsevier), 2023
DOI: 10.1016/j.csa.2023.100019 ↗Business relevanceUnderpins our post-quantum cryptography practice: securing industrial data communication against future quantum attacks.
Senapati, Mishra, Bin Naeem & Rangari · Cryptography (MDPI), 2026
DOI: 10.3390/cryptography10030036 ↗Business relevanceEncrypted-by-design communication patterns that inform how we protect sensitive enterprise and government workloads.
Senapati & Rawal · Cloud Computing and Data Science, 2025
DOI: 10.37256/ccds.6220256292 ↗Business relevanceQuantum-AI applied to predictive maintenance and energy efficiency in high-density industrial environments.
Beyond quantum-safe
Cryptographic migration is where most clients start. These three practices are where a first engagement scales into a capability — each governed by the same rule: benchmark it, or don’t claim it.
Quantum-inspired and hybrid optimisation for manufacturing, supply chain and logistics — running on ordinary CPUs and GPUs, with no quantum hardware required. Every engagement is benchmarked against the method you use today and ends with a documented recommendation to scale, improve or stop.
The solver is the easy half. We integrate the winning one into SAP, your MES or your WMS, so the better plan reaches the people who run the line. No quantum hardware required, and none sold.
Joint programmes with enterprises, government agencies and academic partners. Feasibility studies, proof-of-concept design, grant-funded research, and co-owned IP with defined licensing pathways.
Active tracks include cryptographic protocol design, quantum-AI for predictive maintenance, and forecasting models for agricultural and weather risk.
Independent evaluation, architecture and integration planning for quantum and quantum-safe infrastructure, including procurement support and vendor assessment.
We evaluate and architect rather than manufacture, which means we can tell you what to buy, whether to buy it yet, and how it would fit the estate you actually run.
We are building a platform that keeps a CBOM current instead of letting it go stale the day it is delivered: automated discovery, crypto-agility scoring per system, and a compliance view that maps every finding to the specific mandate and date it breaches.
In active development, built alongside a small number of organisations we already work with and shaped by their production estates. We will open it more widely once it earns that.
Get in touch
Cryptographic discovery. A migration roadmap. An optimisation problem with a real baseline. A QKD proposal you want a second opinion on. Tell us which one, and we’ll come back with a bounded scope and named outputs.
We don’t publish prices. If the work is relevant to you, get in touch and we’ll discuss the engagement model and pricing that fit the scope.