C17
Discovery
How broadly and deeply does the product find cryptographic assets?
Rank 14 / Emerging band / Confidence THIN
QCecuring CBOM
QCecuring / PQC discovery capability record for edition 2026.5.
4.95Index score / 10
CycloneDX-compliant scanning across code, certificates, keys and hardware security modules. S19
Emerging THIN
Seven criterion scores
C26
Evidence artifact
Does it produce a portable, verifiable record of what was found?
C33
Change detection
Can it detect and preserve material changes over time?
C45
Risk quantification
Does it turn inventory into a defensible migration priority?
C53
Correctness
Is detection accuracy measured against named ground truth?
C63
Remediation loop
Can a finding move through ownership, action and verified closure?
C76
Reporting
Can technical and executive readers understand and reuse the result?
What this record can support
The overall score is a weighted capability reading, not a laboratory accuracy result, market-share measure, certification grade or prediction of implementation success.
Evidence class D E and confidence THIN describe the reviewed evidence depth. A lower-confidence row is expected to move more as additional primary technical evidence is located.