Orientation Path

What the attack actually does to deployed cryptography, why recorded traffic is the part with a deadline already running, and which published standards replace what falls.

• What a quantum computer breaks

  Start with the specific damage: Shor's algorithm removes the security of RSA, Diffie–Hellman and the elliptic-curve schemes entirely, and no key size restores it.

  What a quantum computer actually breaks6 min
• Why recorded traffic is the urgent part

  Traffic captured today can be decrypted years later once the attack becomes practical, which is why key establishment moves ahead of signatures in any sensible order of work.

  Harvest now, decrypt later7 min
• The standards that replace what breaks

  NIST published FIPS 203, 204 and 205 in August 2024, and those three documents define the algorithms every migration plan is measured against.

  FIPS 203, 204 and 205, mapped to output7 min

Three tools you can run yourself, on your own numbers, without an account and without sending anything to us.

• A first score for your own estate

  The readiness check asks the timing question and eight inventory questions, scores the answers deterministically in your browser, and keeps the answers there.

  Readiness Check2 min
• The arithmetic of your own window

  Enter how long your data must stay confidential and how long a migration would take you, and the Mosca inequality tells you whether exposure has already begun.

  The Quantum Window4 min
• Standards status and advisory volume

  Every panel here names its source, states its window and shows its freshness, so you can see what is genuinely known before you brief anyone internally.

  Exposure Signals4 min

How we score an estate, which external dates constrain the work, and what the first engagement would put in front of you.

• How an estate is scored

  The Theos Method sets out the five dimensions, the published weights and the version identifier attached to every score we issue.

  The Theos Method11 min
• The dates you do not control

  CNSA 2.0 carries the most concrete public timeline in the field, and regulated buyers increasingly treat it as the reference even where it does not bind them.

  CNSA 2.0 and the federal timeline6 min
• What a first engagement covers

  This is the sequence of a first engagement, what we ask for at each stage, and what you hold at the end of it.

  What the first thirty days look like6 min