PQC
Quantum readiness board
- Hybrid ML-DSA-65 + Ed25519 JWTs in production today.
- Vulnerable-key and crypto-inventory views for migration.
- Crypto agility — not a roadmap promise.
Pillar 02 · Quantum-Resilient
Hybrid PQC identity in production — not a slide.
Dedicated quantum-resilience page: ML-DSA-65 + Ed25519 hybrid JWTs, Vault-backed keys, MFA, and crypto agility for regulated buyers. Distinct layout from Security overview and from OT-native capture.
Live today
ML-DSA-65 + Ed25519 on every session token.
01
Hybrid sign
Classical + post-quantum signatures on JWTs so either algorithm can fail closed later.
02
Vault custody
Signing material stays in HashiCorp Vault — not in app config files.
03
MFA + keys
TOTP for privileged users; API keys with instant revocation.
Related controls
Audit
Compliance joined to quantum posture
- IEC 62443, NIST CSF 2.0, ISO 27001, NERC CIP in one vault-facing view.
- Framework gaps sit next to PQC migration, not in a separate GRC tool.
- Evidence export for the auditor.
Admin
Platform config and health
- Tenant-admin sees PQC-related health without a Super Admin seat.
- Same console as IAM and Evidence Vault.
- Honest labels: live vs partial.
FAQ
Frequently asked questions.
Is PQC roadmap or shipping?
Shipping. Hybrid ML-DSA-65 + Ed25519 JWTs are live in Core sessions today.
How is this different from /security?
Security covers the full control set. This page is the quantum-identity pillar buyers click from the homepage grid.
Prove hybrid PQC identity in a 7-day trial.
A dedicated CyberDragon tenant on your own traffic — not a slide deck. See kill-chain cyber defense on your network.