Finds quantum-vulnerable crypto (RSA, ECDSA, ECDH, DH, SHA-1, 3DES) in your code and config and dates each one against the NIST IR 8547 clock: deprecated after 2030, disallowed after 2035. Runs entirely in your browser — nothing is uploaded.
Same engine as the VS Code extension, byte for byte.
This page is the working piece. The full pack has everything below.
Dates every quantum-vulnerable algorithm in your code against the NIST IR 8547 clock: deprecated after 2030-12-31, disallowed after 2035-12-31.
A security consultant doing the same cryptographic inventory by hand bills $150-$250 an hour, and the first pass over one repository is a day
Buy the full version — $29It reads a source or config file and flags every quantum-vulnerable algorithm in it — RSA, ECDSA, EdDSA, classical ECDH and X25519, finite-field Diffie-Hellman — plus the already-disallowed legacy set: SHA-1 signatures, 3DES, MD5, RSA under 2048 bits, ssh-rsa, PKCS#1 v1.5. Each finding carries a line number, the standard it comes from, and the concrete post-quantum replacement. Seventeen rules in total.
Platform, payments and embedded engineers who merge AI-assisted code, and the security engineers who answer customer questionnaires about cryptographic inventory. If you have ever been asked 'where does your product use RSA, and what is your post-quantum migration plan', this turns that question from a week of grepping into a per-file answer with line numbers and dates.
A chatbot will tell you RSA is quantum-vulnerable; it will not tell you that line 13 of your file is RSA-1024 and disallowed today, nor how many days remain before 2030-12-31 for a date you pick. Generic SAST rules do flag MD5 and SHA-1, but they carry no NIST IR 8547 2030/2035 timeline, which is the part a migration plan is built from.
Checking the file you have open is free, unlimited, for any use including commercial — no watermark, no trial counter, no withheld results. The free web version runs the identical engine in your browser with nothing uploaded. The licence unlocks a different axis: sweeping the whole workspace in one pass and writing a dated report file you keep and hand to someone else.
A security consultant doing the same cryptographic inventory by hand bills $150 to $250 an hour, and the first pass over a single repository is a day. Doing it yourself means grepping for a dozen algorithm names across every language in the repo and then looking up which NIST document retires each one, and on which date. The licence is $29 once, with a 7-day full refund.
One question, answered by the person who built it. Your email only if you want the answer sent.