PQLENS_LICENSE or pass --license.PQLens builds your cryptographic inventory, scores your quantum exposure, and hands you auditor-ready evidence — at mid-market prices. 100% local; nothing leaves your machine.
PCI DSS v4.0 requirement 12.3.3 requires a documented inventory of the cryptography you use — today, not in 2030. PQLens generates that evidence in an afternoon, and flags the embarrassing stuff (MD5, SHA-1, TLS 1.0, RSA-1024) while it's at it. Post-quantum readiness is the roadmap it hands you next.
One tool, from source to certificate. Ships five languages well, not fifteen poorly.
Crypto API usage across Python, JavaScript/TypeScript, Java/Kotlin and Go — algorithm, key size, library, file:line.
Protocol versions, cipher suites, key-exchange groups (spot classical ECDHE vs hybrid X25519MLKEM768), certificate chains and expiry.
PEM/DER stores and directories — key algorithm and size, signature hash, validity, deprecated-signature warnings.
Ingest a CycloneDX or SPDX SBOM and attribute the crypto each dependency ships, classified for quantum risk.
A single static binary — CLI for pipelines, desktop app when you run it with no arguments.
# macOS / Linux — download, then run the desktop app or the CLI curl -fsSL https://files.pqlens.cybxsan.com/latest/pqlens_$(uname -s)_$(uname -m).tar.gz | tar xz ./pqlens # opens the desktop app ./pqlens scan code . # inventory this repo ./pqlens scan tls example.com # probe a TLS endpoint ./pqlens scan code . --fail-on quantum-vulnerable # CI gate (Pro)
Free for local discovery. Paid tiers unlock reports, compliance evidence, and the audit channel.
Need it done for you? The PQC Readiness Assessment — tool-assisted report + 90-day roadmap + 1-hour readout — is $4,500, ~20–25% of Big-4 equivalents. Talk to CybXSan.