Post-Quantum Discovery Capability Index 2026.5

PQC Discovery Index Research

Edition 2026.5 standings

Fourteen products. Seven criteria. One disclosed instrument.

Read scores as capability bands, not as false precision. Every product page exposes the criterion values, evidence class, confidence and strongest documented ground.

Complete 2026.5 ranking

Download the score data (CSV) · Read the report (PDF)

Rank	Product	Score	Band	Confidence	Strongest documented ground
1	QScout Pulse GoldQtonic Quantum Corp	9.42	Leading	DEEP	Signed inventory verifiable by a stranger, published detector accuracy and a published vantage policy. S01 S02 S03
2	CBOM SecureEncryption Consulting	8.21	Strong	MOD	The widest documented discovery surface, continuous policy evaluation and a cryptographically verifiable change log. S04 S05 S06
3	AppViewX Quantum Trust HubAppViewX	7.58	Established	MOD	Bidirectional ServiceNow control, closed-loop certificate lifecycle automation and remediation inside delivery pipelines. S07 S24
4	IBM Guardium + Quantum SafeIBM	7.39	Established	MOD	IBM authored the CBOM specification, and its open-source toolchain has been benchmarked against external ground truth. S09 S10 S23
5	Keyfactor AgileSec + CommandKeyfactor	7.37	Established	MOD	ServiceNow applications route cryptographic findings into vulnerability response and automate certificate deployment to endpoint stores. S08 S25
6	TYCHON Quantum CommandTYCHON	6.74	Developing	THIN	Continuous endpoint telemetry with documented support for air-gapped environments. S11
7	SandboxAQ AQtive GuardSandboxAQ	6.68	Developing	THIN	Continuous analysis and the strongest documented assurance posture in the assessed set. S12
8	QuSecure QuProtect R3QuSecure	6.53	Developing	THIN	Real-time inventory across cloud, on-premises, air-gapped and legacy estates. S13
8	ISARA AdvanceISARA	6.53	Developing	THIN	Agentless cryptographic inventory with posture scoring. S14
10	Fortanix Key Insight / PQC CentralFortanix	6.47	Developing	THIN	Cryptographic inventory correlated to key management, with CBOM export generally available since release 25.07. S15
11	CryptoNext COMPASSCryptoNext	6.26	Developing	THIN	A probe-fed CycloneDX cryptographic inventory database. S16
12	O3 SecurityO3 Security	5.89	Emerging	THIN	QBOM layering inventory, vulnerability class and data lifespan into ranked migration priority. S17
13	DigiCert Quantum CentralDigiCert	5.47	Emerging	THIN	Certificate lifecycle execution once post-quantum priorities are known. S18
14	QCecuring CBOMQCecuring	4.95	Emerging	THIN	CycloneDX-compliant scanning across code, certificates, keys and hardware security modules. S19

How to read the cluster

Leading: QScout at 9.42. Strong: CBOM Secure at 8.21. Established: AppViewX, IBM and Keyfactor sit within 0.21 points and should be treated as a cluster. Developing: TYCHON through CryptoNext. Emerging: O3 Security, DigiCert and QCecuring.

In category, not yet assessed

These products appear to belong in the category but carry no score because they have not been reviewed against the instrument. No score is not a negative finding.

Venafi TLS Protect PQC

Named in independent post-quantum migration analysis as cryptographic discovery tooling. S22

Entrust PKIaaS for PQ

Present in independent post-quantum solution registries. S22

Checkmarx CBOM

Offers CBOM alongside application security tooling. S17

Sectigo CBOM

Offers CBOM alongside certificate tooling. S17

Inspect a product, not just a position

Each product has a stable evidence page designed for search, citation and comparison. The page names the vendor, overall score, criterion values, evidence class, confidence and the sources supporting its strongest documented ground.