The Exposure Sprint
A fixed-scope, two-week assessment of your cryptographic estate: a signed CBOM evidence pack, a top-10 risk brief, and your prime's questionnaire answered from measured data.
Start with a SprintPost-quantum readiness for defense suppliers — your cryptographic estate inventoried, your exposure measured, and a signed evidence pack your prime can file. Measured, evidenced, done for you.
Athanar is a Mississippi company providing post-quantum cryptography readiness to the defense industrial base. We inventory a supplier's full cryptographic estate — systems, libraries, certificates, and traffic — and measure its exposure against the federal migration deadlines.
Every engagement produces a signed evidence pack your prime can file. Work is vendor-neutral and can be delivered fully offline, including in air-gapped environments — client data never leaves the client's premises.
A fixed-scope, two-week assessment of your cryptographic estate: a signed CBOM evidence pack, a top-10 risk brief, and your prime's questionnaire answered from measured data.
Start with a SprintThe complete cryptographic estate, inventoried and ranked against the federal deadlines, with a migration roadmap sequenced by risk.
Scope an assessmentDrift detection across the estate — new certificates, changed configurations, renewed exposure — reported monthly, so your evidence stays current.
Discuss monitoring| Service Parameters | Specification |
|---|---|
| Exposure Sprint | Fixed-scope, two-week readiness assessment of the cryptographic estate |
| Full assessment | Complete estate inventory, risk ranking, and migration roadmap |
| Continuous monitoring | Monthly drift detection and evidence refresh, per estate |
| Evidence format | CBOM, CycloneDX 1.6, digitally signed |
| Standards basis | NIST FIPS 203 / 204 / 205; CNSA 2.0 timelines |
| Key federal dates | Agency PQC plans due Oct 22, 2026 · RSA/ECC deprecated after 2030, disallowed after 2035 |
| Delivery environment | Offline and air-gapped delivery supported |
| Data handling | Client data never leaves the client's premises |
| Vendor position | Vendor-neutral |
| Authorization | Signed authorization required before any scanning |
A briefing covers the measurement method, the evidence pack, and how a readiness engagement fits an existing workflow.