04 Features

Detects the most common cryptographic APIs in Python, JavaScript, TypeScript, Java, Kotlin, Go, C, C++, C# and Swift, plus openssl, ssh-keygen and keytool commands in build scripts.*

• Python
• JavaScript
• TypeScript
• Java
• Kotlin
• Go
• C
• C++
• C#

Automatically creates a standard CycloneDX 1.6 CBOM of the cryptography found in your repositories, or imports CBOMs generated by other tools.

Ranks encryption by how long the data must stay secret, and digital signatures by how long they must be trusted. The most urgent issues are highlighted first.

Automatically flags, on every build, the vulnerable cryptography a change introduces. Brings the checks into pull requests for early feedback.

Works with GitHub Actions, GitLab, Jenkins and Azure DevOps. Run scans on your own computer or inside the pipeline you already use.

• GitHub Actions
• GitLab
• Jenkins
• Azure DevOps

Recognizes the algorithms and key sizes in key and certificate files, and probes the TLS connections of the servers you name with one handshake.

Finds vulnerable key and TLS settings in Terraform, Kubernetes and CloudFormation files, and in web-server, OpenSSL and OpenSSH configuration files in your repository.

Analyzes the code, not the blockchain. Finds secp256k1 and Ed25519 signing keys, Schnorr signatures, and ECDH and ECIES key exchange in common wallet libraries. Gives migration guidance until the blockchain supports post-quantum signatures.

Through a read-only MCP connector, lets AI coding assistants check your cryptography rules while they write code.

Suggests the best-fitting standard: ML-KEM, ML-DSA or SLH-DSA, or a hybrid key exchange.

By default, scans run offline in your CI and your source code stays in your environment. Results reach Quantsiv only if you choose to upload them. Public repositories can also be scanned on Quantsiv's servers; private ones are not.

An AI agent analyzes each finding in its context and proposes a fix. It connects to the model you choose through its chat-completions endpoint, for example ChatGPT, Claude, DeepSeek or Grok, or one you host yourself. No change is merged without the user's approval.