Q-Day readiness field notes.

Walk through the Q-Day scanner demo: baseline inventory, framework mapping, and evidence your auditors can check independently.

How security teams prove fixes with verification scans and signed exports.

Industry timeline shifts, federal deadlines, ECC-before-RSA nuance, and a 90-day action checklist.

Walk through the Qtangl PQC demo: baseline inventory, framework mapping, and evidence auditors can verify.

Original takeaways from a popular Q-Day video — CRQC timelines, HNDL exposure, and inventory steps.

Practitioner insights on harvest-now-decrypt-later and how to quantify exposure before Q-Day headlines.

ML-KEM, ML-DSA, and SLH-DSA in plain language — with hybrid TLS as the near-term path.

Manual TLS inventories miss drift, JWKS, STARTTLS, and re-scan verification.

Walk through a sample CycloneDX Crypto Bill of Materials — algorithms, assets, and GRC integration.

Turn Mosca's X + Y > Z into a board-ready planning question for HNDL exposure.

What CMMC Level 2 assessors expect — inventory artifacts, not slide decks.

Orchestrate overlay, CLM, and KMS flips with dry-run, approval, and signed before/after evidence.

Snapshots across external, host, code, and CBOM sources with SIEM-ready webhooks.

A baseline scan satisfies this quarter's board slide — it does not catch next week's deployment.

Configure re-scan cadence, drift alerts, and readiness score trends.

Prioritize PQC fixes by NSM-10, CNSA 2.0, and data shelf-life — not gut feel.

What the handshake trace appendix means for migration evidence and auditor review.

Quarter-by-quarter plan from inventory to Monitor — with evidence at each step.

Common harvest-now-decrypt-later misconceptions for skeptical security teams.

Technical HNDL primer — TLS records, hybrid migration, and auditor evidence.

Financial data shelf-life and harvest-now-decrypt-later for regional banks.

HNDL exposure for defense contractors — NSM-10, CMMC, and archive shelf-life.

Unified Sensor fleet and OSS scanner pipeline into CBOM merge — partial gate G1/G2 with path to enterprise Yes.

Host sensor, code scan, and binary CBOM discovery ship as enterprise Yes — internally validated at scale.

Landscape comparison of PQC readiness platforms — discovery methods, verifiable evidence, and mid-market fit.

RFP checklist for CISOs — discovery, evidence, drift, CBOM, and mid-market fit.

Agentless vs host agents vs code scan vs KMS — why combine 2–3 methods.

CPM defined — crypto-agility, CBOM, and how it differs from CLM and GRC.

What boards miss about harvest-now-decrypt-later — Mosca inequality, HNDL exposure, and why quantum-vulnerable crypto needs inventory now.

Original takeaways from minutephysics on Shor's algorithm — and how to map the threat to your PKI inventory.

Veritasium connects quantum computing, HNDL, and NIST PQC — with migration steps for security teams.

PBS goes deeper on Shor's number theory — takeaways for security engineers.

Physics World interview with Peter Shor — factoring and future quantum computers.

NIST PQC lead on 2035 timelines, migration myths, and crypto-agility.

RWPQC session on FIPS 203–205, on-ramp signatures, and global roadmaps.

Michele Mosca on quantum threats, crypto-agility, and multi-year migration.

Root Causes 613 on NIST PQC contests, Falcon, HQC, and on-ramp signatures.

Cloudflare accelerated PQ targets — encryption, authentication, and hybrid TLS lessons.

CISA quantum readiness — HNDL, hybrid migration, and discovery automation.

Cryptography 101 course on Kyber and Dilithium — FIPS 203 and 204.

liboqs and IBM quantum-safe OpenSSL — prototype PQC before production.

Executive Shor's explainer — RSA/ECC risk, AES survival, and first inventory steps.

Grover weakens AES — unlike Shor, the fix is larger keys.

Quantum key distribution vs post-quantum cryptography — different problems, different deployments.

X + Y > Z for healthcare, banking, and SaaS — when HNDL exposure is already open.

ML-KEM, ML-DSA, and SLH-DSA — what NIST standardized and what each replaces.

Hybrid post-quantum TLS — deployment path, lab setup, and audit evidence.

How ciphertext is harvested today — threat model and prioritization.

TLS is the tip of the iceberg — JWKS, SSH, email, firmware, and tokens.

Phased migration aligned to NIST IR 8547, CNSA 2.0, and NSM-10.

Structured curriculum with embedded videos, NIST links, and blog companions.