Start here
Start with a readiness sprint.
Two weeks, a fixed fee, and a clear answer to the first question every board asks: where are we exposed, and what do we fix first?
- From kickoff to findings
- 2 weeks
- From kickoff to findings
- Agreed before we start
- Fixed fee
- Agreed before we start
- Ranked, with owners
- 10 priorities
- Ranked, with owners
What you get
Three things, ready for the board.
- 01
Exposure heatmap
Where quantum-vulnerable cryptography sits across your estate, at a glance.
- 02
Mosca analysis
X + Y against Z for every data class you hold, so you know which data is already at risk.
- 03
Top-ten priorities
The first ten things to fix, in order, ready to take to the board.
What the sprint covers
Stage 01 of the method: Assess.
Know your exposure, by data class.
- Six-dimension readiness scan
- Mosca analysis (X + Y vs Z) for every data class
- Gap analysis against DORA, NIST and EU guidance
Try it first
Run Mosca’s test before you call.
If X + Y is greater than Z, that data is already exposed. The sprint runs this for every data class you hold.
How long this data must stay confidential.
How long it will take to move the systems protecting it to post-quantum cryptography.
Your assumption for when a cryptographically relevant quantum computer exists. Estimates vary widely.
X + Y > Z/16 vs 12 years
Exposed. Data encrypted before migration ends could be read for up to 4 years while it must still be secret.
A readiness sprint replaces these assumptions with your real data classes and systems.
Start with a readiness sprintIllustrative model based on Mosca's theorem. Not advice.
Why now
Security is moving from retrofit to mandatory spend.
PQC
2035
Standards deadline
NIST finalised its first post-quantum standards in 2024 and targets removal of quantum-vulnerable algorithms by 2035, with earlier action for high-risk systems.
Source: NIST
AI
89%
Enterprise AI adoption
The share of enterprises now using AI, up from 55% in 2023.
Source: McKinsey, The state of AI in 2026
Risk
$4.99M
Average breach cost
A record, up 12% year on year. AI-enabled breaches average about $6M.
Source: IBM, Cost of a Data Breach 2026
How to engage
Start small. Expand on evidence.
Most clients begin with a two-week readiness sprint and decide what comes next with the results in hand.
- 01
Readiness sprint
A fixed-fee, two-week sprint: an exposure heatmap, a Mosca analysis and your top ten priorities.
About the readiness sprint - 02
Pilot
A scoped discovery or secure-AI pilot with named senior leads and a weekly delivery cadence.
- 03
Partner
An ongoing advisory and migration programme, led by the same senior people who ran the sprint.
Two weeks from now, you could know.
Most clients decide what comes next with the results in hand: a scoped pilot, or an ongoing programme.