Understand the cryptography you depend on. Bring direction to AI-powered work. We’re building tools to help with both, and sharing useful security knowledge along the way.
CIPHERSTANCEWe’re starting with two questions: where do you rely on cryptography, and how do you keep AI agents working towards the same goal?
We’re building Q-Day Ready to find cryptography in your code and configuration, so you can see what needs attention and prepare for your next review.
More about Q-Day ReadyWe’re building CipherAgents to bring AI agents together around the work you need done, with a plan they agree on and a result you review before it goes anywhere.
More about CipherAgentsCipherStance was born from the security-obsessed minds of cybersecurity leaders, subject-matter experts and like-minded enthusiasts, driven to make complex security problems easier to solve.
We want to know how things work, where they can break and what it takes to fix them. That curiosity keeps us digging into the details, questioning assumptions and looking for ways to make difficult work easier.
Q-Day Ready and CipherAgents are where we’re putting those ideas to work. We’re building one to help you understand the cryptography you rely on, and the other to help AI agents work together while you stay in control. Both are coming soon. If there’s a problem you keep running into, we’d like to hear about it.
Share a problem with usWhy a guide gives certain advice. Why a finding needs attention. Why an AI agent chose a particular approach. We want you to have enough context to make your own call.
Our guides link to the research, standards and official guidance behind them. You can read the explanation, follow the sources and decide what applies to your work.
Browse the guidesFor Q-Day Ready, we’re putting the source of each finding and the gaps in a scan alongside the result. You should be able to see what was checked and what still needs a closer look. The preview shows how that could work.
Take a look at the previewFor CipherAgents, we’re building in a second opinion on the plan, checks on the work and your approval before delivery. You choose what to use and when to use it.
See the approachBefore you can plan a cryptography review or a move to post-quantum algorithms, you need to know what you’re using. We’re building Q-Day Ready to help you find that in your code and configuration, keep the evidence together and see where you still need to investigate. We’ll start with repositories, uploaded archives and imported inventories; network and cloud sources will follow later.
The starting point: a record of the cryptography found in the code and configuration you choose to examine.
What we’re building towards
An incomplete scan shouldn’t leave you thinking everything is fine. We want Q-Day Ready to show the parts it couldn’t check alongside what it found, so you know where to look next.
The workflow we’re working towards
First release: we’re planning a free hosted evaluation with GitHub and ZIP inputs, basic CBOM import, an inventory for the areas you choose and a draft PCI DSS evidence pack. More sources, approved evidence packs and enterprise deployment options will follow later.
What was checked, where it came from and who reviewed it
The planned initial PCI evidence pack is a draft for review. It is not a compliance certification or a guarantee of quantum safety.
Getting several AI agents to do useful work together takes more than giving them the same prompt. We’re building CipherAgents around a shared plan, checks on the result and a person who decides what gets delivered. It’s intended to run on infrastructure you control.
Tell it what you want to achieve in your own words. Our plan is for two lead agents from different AI model families to work out their approaches separately, then agree on a plan before the team starts.
We’re planning for each result to be checked in an isolated environment and reviewed again before delivery. Then you decide whether to download it, apply a change or open a draft pull request.
Get to grips with quantum computing, cryptography and AI security. Our guides explain the ideas and link to the sources, so you can keep reading wherever your questions take you. No account needed.
A qubit is not a bit that holds every answer at once. Here is what superposition and measurement really mean, in plain language.
Public-key cryptography lets strangers agree on secrets and prove who they are. Here is how it works, where you rely on it, and which parts a quantum computer would threaten.
Post-quantum cryptography is a set of new algorithms that run on ordinary computers but are designed to resist quantum attack. Here is what it replaces, what it leaves alone and why the work starts now.
Have a question, an idea or a problem you keep running into? Tell us about it. We’d like to hear what you’re working on.