Sectigo Launches Quantum Ready for PQC Migration Planning
Sectigo has launched Sectigo Quantum Ready, an offering designed to help enterprises identify their cryptographic assets and assess their post-quantum exposure. As a certificate and PKI vendor, Sectigo aims this tool at organizations looking to inventory cryptographic assets before any migration.
Quantum Ready Features
According to Sectigo, the tool discovers cryptographic assets and dependencies across an environment, creating a Cryptographic Bill of Materials. It then scores exposure based on business criticality, data sensitivity, dependencies, and migration complexity, helping teams prioritize remediation efforts.
Sectigo positions this offering within its Quantum Security Posture Management, alongside its Certificate Manager platform for executing cryptographic changes.
Ian Hassard, Sectigo’s chief product officer, stated that the main challenge of the transition is “knowing where cryptography lives, what depends on it and how to change it without disrupting the business.”
Standards Compliance
Sectigo’s quantum-labs page references NIST post-quantum standards: FIPS 203, 204, and 205, which cover ML-KEM, ML-DSA, and SLH-DSA. The Quantum Ready launch material does not specify which algorithms contribute to its risk scoring or if any issuance path utilizes these standards versus hybrid schemes.
The FIPS 140-3 module validation status for any component is not addressed in the sources and should be considered undisclosed. It is important to distinguish between entropy-source validation and full module validation, as their claims of compliance differ. This discussion also does not pertain to QKD, which is not post-quantum cryptography.
Limitations of the Announcement
A product launch does not equate to adoption. The announcement does not indicate any enterprise has completed a migration, nor does it provide pilot metrics. Though “harvest now, decrypt later” concerns drive this inventory work, the machine capable of breaking public-key cryptography has not yet been built.
NIST guidance and CA/Browser Forum timelines remain the primary reference, not vendor urgency. Similar readiness pitches emerged the same week, including Falqon Systems’ rebrand focused on quantum secure networking.
Read more