Edition 2026.7 standings
Fourteen products. Seven criteria. One disclosed instrument.
Read scores as capability bands, not as false precision. Every product page exposes the criterion values, evidence class, confidence and strongest documented ground.
Ranking of 14 assessed products[1]
Search all 98 evidence cells · Download the score data (CSV) · Evidence files · Edition 2026.5 report (PDF, superseded)
| Rank | Product | Score | Band | Confidence | Strongest documented ground |
|---|---|---|---|---|---|
| 1 | QScout Pulse GoldQtonic Quantum Corp | 8.00 | Leading | DEEP | A publicly verifiable signed sample CBOM for its own API, public trust endpoints, and a vendor-labeled accuracy corpus with stated limits. S27S28S29S30 |
| 2 | CBOM SecureEncryption Consulting | 7.47 | Strong | MOD | Vendor-documented broad discovery, continuous monitoring, and a claimed tamper-evident change log. S04S05S06 |
| 3 | Keyfactor AgileSec + CommandKeyfactor | 6.53 | Established | MOD | AgileSec’s scheduled ServiceNow connector imports cryptographic vulnerabilities and detections for investigation. S08S25 |
| 3 | QCecuring CBOMQCecuring | 6.53 | Established | MOD | Documented scanners for TLS, certificates, source code, binaries, cloud key stores, filesystems and SSH, with CycloneDX 1.6 CBOM export. S19 |
| 5 | AppViewX Quantum Trust HubAppViewX | 6.37 | Established | MOD | Reviewed Quantum Trust Hub documentation covers PQC discovery, readiness scoring and CBOM export; its guide describes PQC remediation as manual. S07S24 |
| 6 | SandboxAQ AQtive GuardSandboxAQ | 6.21 | Established | MOD | Reviewed SaaS documentation describes broad discovery and continuous inputs; Protect documents ACME-based certificate rotation. S12 |
| 7 | Fortanix Key Insight / PQC CentralFortanix | 5.74 | Developing | MOD | Cryptographic inventory correlated to key management, with CBOM export generally available since release 25.07. S15 |
| 8 | IBM Guardium + Quantum SafeIBM | 5.58 | Developing | MOD | IBM Research contributed to CycloneDX CBOM; its separate Cryptoscope study reports measured accuracy, not validation of this scored Guardium + Quantum Safe product. S09S10S26 |
| 9 | O3 SecurityO3 Security | 5.47 | Developing | MOD | Product pages describe a QBOM inventory, an algorithm-based HNDL flag and ranked migration paths. S17 |
| 10 | ISARA AdvanceISARA | 5.42 | Developing | MOD | Vendor material describes passive network discovery, endpoint and key-vault inputs, and posture scoring. S14 |
| 11 | DigiCert Quantum CentralDigiCert | 5.37 | Developing | MOD | Quantum Central documentation describes Jira task/status exchange and policy-based verification of remediation. S18 |
| 12 | QuSecure QuProtect R3QuSecure | 5.21 | Developing | MOD | Vendor pages document passive live-network sensors, continuous inventory and policy-driven remediation. S13 |
| 13 | TYCHON Quantum CommandTYCHON | 5.16 | Developing | MOD | Vendor pages describe endpoint and passive-network discovery; an unmerged partner Elastic integration shows a proposed export schema. S11 |
| 14 | CryptoNext COMPASSCryptoNext | 4.68 | Emerging | THIN | A probe-fed CycloneDX cryptographic inventory database. S16 |
How to read the cluster
Leading: QScout at 8.00. Strong: CBOM Secure at 7.47. Established: Keyfactor, QCecuring, AppViewX and SandboxAQ sit within 0.32 points and should be treated as a cluster. Developing: Fortanix, IBM, O3 Security, ISARA, DigiCert, QuSecure and TYCHON. Emerging: CryptoNext COMPASS at 4.68.
Criterion-by-criterion comparison
Select any score for the original assessment, primary source excerpts and review changes.
| Product | DiscoveryWeight 4/19 | Evidence artifactWeight 3/19 | Change detectionWeight 3/19 | Risk quantificationWeight 3/19 | CorrectnessWeight 2/19 | Remediation loopWeight 2/19 | ReportingWeight 2/19 | Overall |
|---|---|---|---|---|---|---|---|---|
| QScout Pulse Gold | 8 | 9 | 8 | 9 | 6 | 6 | 9 | 8.00 |
| CBOM Secure | 10 | 7 | 8 | 7 | 4 | 6 | 8 | 7.47 |
| Keyfactor AgileSec + Command | 9 | 6 | 6 | 6 | 4 | 7 | 6 | 6.53 |
| QCecuring CBOM | 9 | 6 | 6 | 6 | 4 | 6 | 7 | 6.53 |
| AppViewX Quantum Trust Hub | 8.5 | 6 | 5 | 6 | 4 | 7 | 7 | 6.37 |
| SandboxAQ AQtive Guard | 10 | 4 | 5 | 6 | 4 | 6.5 | 6 | 6.21 |
| Fortanix Key Insight / PQC Central | 9 | 6 | 5 | 6 | 0 | 4 | 7 | 5.74 |
| IBM Guardium + Quantum Safe | 8 | 6 | 4 | 6 | 0 | 7 | 6 | 5.58 |
| O3 Security | 7 | 6 | 5 | 7 | 0 | 4 | 7 | 5.47 |
| ISARA Advance | 8 | 3 | 5 | 7 | 0 | 6 | 7 | 5.42 |
| DigiCert Quantum Central | 6 | 4 | 5 | 5 | 4 | 8 | 6 | 5.37 |
| QuSecure QuProtect R3 | 4 | 6 | 6 | 6 | 0 | 6.5 | 8 | 5.21 |
| TYCHON Quantum Command | 8 | 4 | 4 | 6 | 0 | 6 | 6 | 5.16 |
| CryptoNext COMPASS | 6 | 6 | 5 | 4 | 0 | 4 | 6 | 4.68 |
In category, not yet assessed
These products appear to belong in the category but carry no score because they have not been reviewed against the instrument. No score is not a negative finding.
- Arqit Encryption Intelligence
- Found during the 2026.7 research. Vendor page lists 'Comprehensive discovery of all encrypted traffic across your estate' and 'Identification of missing, weak, obsolete or quantum-vulnerable cryptography'; full commercial launch announced 22 Jan 2026. Not yet scored. S32
- PQStation QVision
- Found during the 2026.7 research. Vendor homepage: 'A continuously refreshed view of every cryptographic asset, algorithms, keys, certificates, protocols, scored by quantum risk and mapped to a migration roadmap.'. Not yet scored. S32
- QryptoCyber platform (QryptoDiscover)
- Found during the 2026.7 research. Cryptographic discovery and inventory platform producing a CBOM across external/internal networks, IT/IoT assets, databases and code, positioned for post-quantum risk. Not yet scored. S32
- QuintessenceLabs TSF Sentry
- Found during the 2026.7 research. Announced 23 Sep 2026: 'TSF ® Sentry goes beyond cryptographic discovery and CBOM inventory by connecting findings to the applications responsible for them'. Not yet scored. S32
- Venafi TLS Protect PQC
- Named in independent post-quantum migration analysis as cryptographic discovery tooling. S22
- Entrust PKIaaS for PQ
- Present in independent post-quantum solution registries. S22
- Checkmarx CBOM
- Offers CBOM alongside application security tooling. S17
- Sectigo CBOM
- Offers CBOM alongside certificate tooling. S17
Inspect a product, not just a position
Each product has a stable evidence page designed for search, citation and comparison. The page names the vendor, overall score, criterion values, evidence class, confidence and the sources supporting its strongest documented ground.
- QScout Pulse Gold - 8.00
- CBOM Secure - 7.47
- Keyfactor AgileSec + Command - 6.53
- QCecuring CBOM - 6.53
- AppViewX Quantum Trust Hub - 6.37
- SandboxAQ AQtive Guard - 6.21
- Fortanix Key Insight / PQC Central - 5.74
- IBM Guardium + Quantum Safe - 5.58
- O3 Security - 5.47
- ISARA Advance - 5.42
- DigiCert Quantum Central - 5.37
- QuSecure QuProtect R3 - 5.21
- TYCHON Quantum Command - 5.16
- CryptoNext COMPASS - 4.68