C1 / 21.05% of index
Discovery
How broadly and deeply does the product find cryptographic assets?
What is discovery?
Cryptographic discovery identifies certificates, keys, algorithms, protocols, libraries and cryptographic dependencies across code, infrastructure, networks, endpoints and cloud services.
A post-quantum migration plan cannot govern assets it has not found. Breadth matters, but buyers also need evidence about false negatives and the vantage points from which discovery occurred.
Questions to ask a vendor
- Which asset classes and environments are enumerated?
- What cannot be observed from the deployed vantage points?
- Is recall measured against independently constructed ground truth?
Discovery scores in edition 2026.5
| Position on criterion | Product | Discovery score | Overall score | Evidence |
|---|---|---|---|---|
| 1 | QScout Pulse GoldQtonic Quantum Corp | 10 | 9.42 | S01S02S03 |
| 2 | CBOM SecureEncryption Consulting | 9.5 | 8.21 | S04S05S06 |
| 3 | Keyfactor AgileSec + CommandKeyfactor | 9 | 7.37 | S08S25 |
| 4 | AppViewX Quantum Trust HubAppViewX | 8.5 | 7.58 | S07S24 |
| 5 | IBM Guardium + Quantum SafeIBM | 8 | 7.39 | S09S10S23 |
| 6 | TYCHON Quantum CommandTYCHON | 8 | 6.74 | S11 |
| 7 | SandboxAQ AQtive GuardSandboxAQ | 8 | 6.68 | S12 |
| 8 | Fortanix Key Insight / PQC CentralFortanix | 8 | 6.47 | S15 |
| 9 | ISARA AdvanceISARA | 7 | 6.53 | S14 |
| 10 | O3 SecurityO3 Security | 7 | 5.89 | S17 |
| 11 | QCecuring CBOMQCecuring | 7 | 4.95 | S19 |
| 12 | QuSecure QuProtect R3QuSecure | 6 | 6.53 | S13 |
| 13 | CryptoNext COMPASSCryptoNext | 6 | 6.26 | S16 |
| 14 | DigiCert Quantum CentralDigiCert | 6 | 5.47 | S18 |