PQC Discovery IndexPDF 2026.5

C2 / 15.79% of index

Evidence artifact

Does it produce a portable, verifiable record of what was found?

What is evidence artifact?

An evidence artifact is a portable record of discovery results, such as a CycloneDX cryptographic bill of materials, that can be validated and reused outside the product interface.

A dashboard assertion is not the same as durable evidence. Schema validation, hashes, signatures and public verification procedures determine whether another party can prove the artifact is complete and unaltered.

Questions to ask a vendor

  1. Can the complete artifact be downloaded?
  2. Does it validate against a named schema?
  3. Can an unaffiliated third party verify integrity without contacting the vendor?

Evidence artifact scores in edition 2026.5

Position on criterionProductEvidence artifact scoreOverall scoreEvidence
1QScout Pulse GoldQtonic Quantum Corp10
9.42S01S02S03
2IBM Guardium + Quantum SafeIBM8.5
7.39S09S10S23
3CBOM SecureEncryption Consulting8
8.21S04S05S06
4Keyfactor AgileSec + CommandKeyfactor8
7.37S08S25
5AppViewX Quantum Trust HubAppViewX7
7.58S07S24
6Fortanix Key Insight / PQC CentralFortanix7
6.47S15
7CryptoNext COMPASSCryptoNext7
6.26S16
8TYCHON Quantum CommandTYCHON6
6.74S11
9QuSecure QuProtect R3QuSecure6
6.53S13
10O3 SecurityO3 Security6
5.89S17
11DigiCert Quantum CentralDigiCert6
5.47S18
12QCecuring CBOMQCecuring6
4.95S19
13SandboxAQ AQtive GuardSandboxAQ5
6.68S12
14ISARA AdvanceISARA5
6.53S14