Advisory &
Risk Assessment

We don't boil the ocean. We find your most exposed assets and fix them first — starting with the signatures that need to survive the next 20 years. Targeted, specialist advisory in weeks, not quarters.

Packaged advisory offerings

From half-day executive briefings to ongoing retainers. Each engagement is designed to generate clarity, urgency, and a clear path to quantum safety.

01

Quantum Risk Briefing

Half-day executive workshop translating quantum threats into business language. Covers HNDL threat framing, Mosca's inequality applied to your data retention obligations, regulatory timeline mapping (NIST, CNSA 2.0, eIDAS, Australian ETA), and a prioritised action plan.

Duration
Half day
Audience
C-suite, CISO, board risk committees
Deliverable
Executive-ready threat assessment
Workshop
02

Cryptographic Inventory & Vulnerability Assessment

A comprehensive Cryptographic Bill of Materials (CBOM) — every algorithm, certificate, key, and protocol in use across your infrastructure, mapped and scored by quantum risk. Covers TLS/SSL, VPN, code signing, document signing, email encryption, database encryption, API authentication, and key management.

Duration
4-8 weeks
Audience
IT security teams, CISOs, compliance officers
Deliverable
Scored vulnerability report (sensitivity x retention x exposure)
Assessment
03

PQC Migration Roadmap

A 3-5 year migration plan with phased priorities, budget estimates, vendor recommendations, and compliance checkpoints. Includes crypto-agility architecture recommendations, hybrid classical/PQC transition planning, PKI migration sequencing, and vendor evaluation criteria.

Duration
2-4 weeks (follows assessment)
Audience
IT leadership, procurement, compliance
Deliverable
Phased migration plan with budget estimates
Roadmap
04

Quantum Readiness Retainer

Monthly or quarterly retainer for ongoing cryptographic posture monitoring, regulatory tracking, and migration checkpoint reviews. Includes algorithm update alerts, compliance gap monitoring, and annual re-assessment.

Cadence
Monthly or quarterly
Audience
Organisations mid-migration
Deliverable
Continuous posture management
Retainer
05

Developer PQC Training Workshops

Hands-on sessions for engineering teams on implementing ML-KEM, ML-DSA, and SLH-DSA. Covers library selection, hybrid deployment patterns, key management, performance benchmarking, and side-channel awareness.

Duration
Half-day or full-day
Audience
Engineering teams
Deliverable
Internal PQC implementation capability
Training

Start with a free
executive threat briefing

30 minutes. No jargon. A clear picture of your quantum exposure and what to do about it.