Guide · 4 min read
PQC readiness: the first five actions
Five practical actions that turn post-quantum planning into an inventory, tested deployment paths, and supplier commitments.
Read the guideCryptographic change
Find the dependencies before certificates and algorithms change.
Shorter certificate lifetimes and post-quantum migration expose the same operating question: who can change cryptography safely, and how will they prove it worked? Explore inventories, renewal operations, interoperability tests, and supplier commitments.
Start with a question
Which dependency will stop your next certificate or algorithm change from reaching production?
- Find owners and relying parties, not just certificates.
- Sequence post-quantum pilots around exposure and interoperability.
- Make renewal, replacement, and rollback repeatable.
Guides & field notes
Guide · 7 min read
PQC migration: build the ability to change cryptography
A practical architecture and roadmap for moving from an algorithm inventory to tested post-quantum deployment.
Read the guideGuide · 7 min read
PKI operations: from renewal alerts to a managed service
Build certificate operations that can handle shorter lifetimes, changing trust policies, and the next algorithm transition.
Read the guideWhere the subjects connect
Guide · 7 min read
Device identity from manufacture to retirement
A practical architecture for provisioning, attestation, signed updates, recovery, and evidence across the life of a connected product.
Read the guidePractical guide · 5 min read
Funding digital trust with your own evidence
Build a decision around operating costs, required capabilities, and testable risk reduction. Make every assumption visible.
Read the practical guideRelated writing
- If You Use Public Certificates for mTLS, Start Looking Now
A few weeks ago, I was on a customer call while one of my colleagues ran through the certificate changes coming at the industry. There were six in less than two minutes. One of…
- The Quantum Clock Moved. The Deadline Is Already Written.
In 2019, the best public estimate for breaking a 2048-bit RSA key put the job at a quantum computer with about twenty million qubits, running for eight hours.² In May 2025, the…
- The Internet Already Went Post-Quantum. Nobody Sent a Memo.
Sometime in the last week of October 2025, the internet crossed a line that should have made headlines. For the first time, more than half of all human web traffic was…