A crucial first step in transitioning to quantum-safe cryptography is understanding your cryptographic landscape. This requires discovering and inventorying the cryptographic assets within your IT environment.
Various Crypto Asset Discovery (CADI) tools are emerging from different vendors, each with unique approaches and varying levels of maturity. Keeping track of this evolving market can be challenging.
The CADI Index aggregates publicly available information about these tools to support cybersecurity professionals in their research and decision-making. All data included here comes from public sources, such as NIST SP 1800-38B and official vendor websites.
- Tools are listed alphabetically by vendor name.
- Yes/No fields indicate whether a tool is confirmed to support a specific functionality.
- A blank field means the functionality is either unknown or unconfirmed.
| Tool name | Vendor | License | Network traffic | Code / Development pipelines | Filesystem | Runtime and applications | Requires agents | Leverages external tools | Others | Comments |
|---|---|---|---|---|---|---|---|---|---|---|
| Cryptomon | Banco Santander | Opensource | Yes | No | No | No | No | |||
| CryptoBOM-Forge | Banco Santander | Opensource | No | Yes | No | No | No | CodeQL | ||
| Mercury | Cisco | Commercial | Yes | No | No | No | ||||
| Pcert | Datawarehouse | Commercial | Yes | Yes | Yes | HSMs, TPM, Truststores | ||||
| Key Insight | Fortanix | Commercial | ||||||||
| CodeQL | Github | Commercial | No | Yes | No | No | ||||
| Quantum Safe Explorer | IBM | Commercial | No | Yes | No | Yes | No | Yes | ||
| Guardium Quantum Safe | IBM | Commercial | Yes | |||||||
| Crypto Analytics Tool (CAT) | IBM | Commercial | For Z mainframes | |||||||
| AgileSec Analytics | Infosec Global | Commercial | Yes | Yes | ||||||
| Advance | ISARA | Commercial | ||||||||
| Command | Keyfactor | Commercial | Certificates | |||||||
| NGFW | Palo Alto | Commercial | Yes | No | No | No | No | |||
| QryptoScan | QryptoCyber | Commercial | ||||||||
| QryptoDiscover | QryptoCyber | Commercial | ||||||||
| QryptoAssets | QryptoCyber | Commercial | ||||||||
| QryptoDB | QryptoCyber | Commercial | ||||||||
| QryptoCode | QryptoCyber | Commercial | Yes | |||||||
| CDT | QuantumGate | Commercial | ||||||||
| CipherInsights | QuantumXchange | Commercial | Yes | No | No | |||||
| QuProtect | QuSecure | Commercial | ||||||||
| S-CAPE | Samsung SDS | Commercial | Yes | |||||||
| SECUI BLUEMAX NGF VE | Samsung SDS | Commercial | Yes | No | No | No | No | |||
| AqtiveGuard | SandboxAQ | Commercial | Yes | Yes | Yes | Yes | No | Yes | ||
| SSHerlock | SSH.com | Opensource | SSH keys | |||||||
| Transparency Platform | Binarly | Commercial | No | Yes | Yes | Yes | No | No | Firmware, Docker |