The Readiness Scan negotiates a real handshake with your domain, reads its ciphers and signatures, and hands back a single letter — A through F — for how exposed you are to Harvest Now, Decrypt Later. Free to run. No signup. No app changes.
We weight key exchange, certificate signatures, stored-data horizon and protocol hygiene into one honest grade.
Hybrid PQC live
PQC partial
Modern, classical
Harvestable
Exposed
Fully exposed
The free scan grades your front door. The deep scan walks the whole house — and hands your team a remediation order.
Every endpoint, cipher suite and certificate chain across your domains and subdomains.
Tunnels and remote-access gateways — the long-lived sessions adversaries love to record.
SMTP/TLS posture, where decades of correspondence travels in the clear-ish.
Storage and backup encryption, weighted by how long that data must stay secret.
Where keys live, how they rotate, and whether your stack can swap algorithms at all.
A ranked, plain-language to-do list — what to fix first for the biggest exposure cut.
Before Secuur graded a single customer, we ran the scan on ourselves — and didn't like the D we got. So we migrated every endpoint, API and internal link to hybrid post-quantum encryption, then wrote down exactly how. Your migration isn't an experiment. It's a path we've already walked.
Then we rebuilt the scanner to grade eight layers instead of one, ran it on ourselves again, and our own grade went down to a C. We are publishing that rather than quietly regrading ourselves, because a scanner whose owner scores themselves generously is worth nothing to you.
A one-time deep scan with the full seven-layer teardown, your remediation order, and a shareable PDF your board will actually read. Pay once. No subscription.
A low grade routes straight to the right fix — self-serve for smaller teams, a guided plan for regulated ones. Never a dead end.