C5 / 10.53% of index

Correctness

Is detection accuracy measured against named ground truth?

What is correctness?

Correctness measures whether the discovery system finds real cryptographic assets while controlling false negatives, false positives and partial matches.

An inventory can look comprehensive while silently missing assets. Named corpora, independent ground truth and reproducible evaluators make accuracy claims auditable.

Questions to ask a vendor

  1. What corpus was used?
  2. Who constructed and labeled the ground truth?
  3. Are precision, recall and partial-match rules published per detector?

Correctness scores in edition 2026.5

Position on criterionProductCorrectness scoreOverall scoreEvidence
1QScout Pulse GoldQtonic Quantum Corp8
9.42S01S02S03
2IBM Guardium + Quantum SafeIBM8
7.39S09S10S23
3CBOM SecureEncryption Consulting6
8.21S04S05S06
4AppViewX Quantum Trust HubAppViewX6
7.58S07S24
5SandboxAQ AQtive GuardSandboxAQ6
6.68S12
6QuSecure QuProtect R3QuSecure6
6.53S13
7TYCHON Quantum CommandTYCHON5
6.74S11
8ISARA AdvanceISARA5
6.53S14
9Fortanix Key Insight / PQC CentralFortanix5
6.47S15
10CryptoNext COMPASSCryptoNext5
6.26S16
11Keyfactor AgileSec + CommandKeyfactor4
7.37S08S25
12DigiCert Quantum CentralDigiCert4
5.47S18
13O3 SecurityO3 Security3
5.89S17
14QCecuring CBOMQCecuring3
4.95S19