PQC Scanner — MOSS
Home/PQC Scanner

Every algorithm quantum breaks, found and replaced

Point MOSS at a repository or an endpoint. It finds every RSA, ECDSA, and Diffie-Hellman handshake a quantum computer can forge, then converts each one to its FIPS-validated post-quantum replacement.

RSA · ECC
QUANTUM-VULNERABLE
ML-KEM · ML-DSA
FIPS 203 · 204 REPLACEMENT
AES-256
SAFE · LEFT UNTOUCHED
{{ s.tag }}

{{ s.title }}

{{ s.body }}

WHAT A SCAN RETURNS SAMPLE OUTPUT

Every vulnerable primitive, mapped to its replacement

ALGORITHM USED FOR VERDICT REPLACEMENT
{{ f.algo }} {{ f.use }} {{ f.verdict }} {{ f.arrow }} {{ f.to }}

Illustrative sample. Your scan reports your own primitives. Symmetric primitives like AES-256 stay; only quantum-vulnerable asymmetric crypto is converted.

HOW CONVERSION WORKS

Scan to signed migration

{{ s.num }}

{{ s.title }}

{{ s.body }}

USING THE SCANNER

Three ways to run a scan

Scan a repository in the browser, wire it into CI, or work from the migration playbooks. Every path reports the same findings against your real crypto.

01 · HOSTED SCANNER

Point it at a repository

Open the scanner, paste a GitHub repository URL, and it walks the codebase for quantum-vulnerable primitives and returns the findings table above.

# open in your browser
pqc.mosscomputing.com
→ paste https://github.com/org/repo
02 · CONTINUOUS INTEGRATION

Fail the build on new legacy crypto

Run the scan in GitHub Actions or GitLab CI in cloud mode against the hosted API. Set a severity gate and export SARIF or GitLab Code Quality reports.

# .github/workflows/pqc.yml
- uses: mosscomputing/moss-pqc-tool/action@v1
with:
api-url: https://api.pqc.mosscomputing.com
api-key: ${{ secrets.MOSS_PQC_KEY }}
fail-on: high
DETECTION COVERAGE · 23 RULES, POWERED BY SEMGREP
Python10 rules

RSA / ECDSA keygen and signing, PyCrypto, PyJWT, Paramiko, weak hashes, SSL context, asymmetric cryptography.

JavaScript7 rules

jose, jsonwebtoken, node crypto keygen and signing, node-forge, TLS configuration.

Java6 rules

BouncyCastle, JWT, KeyPairGenerator, Signature, SSL context.

MIGRATION PLAYBOOKS · 7 CATEGORIES
Overview Key generation Signing Encryption JWT TLS Hashing

Each playbook pairs a vulnerable pattern with its post-quantum replacement and before / after code, so the fix is a copy-and-verify rather than a research project.

Scan your stack

Point us at a repository or an endpoint. We run the scan and walk you through the migration plan on your real crypto.