Commercial path
Buyer path is ticket or contact intake, then operator-governed enterprise provision. Scope is confirmed before anything runs. Marketplace login is sealed into enterprise intake on purpose.
Operator-quoted bands (not a storefront)
Surface
Approved-scope map
Exposure boundary + decision language. Quoted after scope confirm.
Silver
Depth + priority
Material paths, owners, CBOM-grade evidence where approved.
Gold
Prove + sequence
QStrike-ready proof package and migration sequence inputs.
No public SKU prices. Bands set expectation; commercial terms are operator-quoted under scope.
Find
Approved-scope cryptographic exposure map, CBOM-oriented inventory, and owner-ready findings under a fixed evidence boundary.
Prove
Governed validation of material paths with reviewable evidence. Public QStrike Challenge terms apply only to QStrike under published conditions.
Fix
Owners, exceptions, and hybrid-to-PQC sequencing tied to the same evidence record — not a generic PQC shopping list.
Partner & channel path
Systems integrators and advisory partners may introduce governed QScout / QStrike / QSolve engagements under the same evidence standard. Managed-security (MSSP) and reseller channel terms are not self-serve — request a channel conversation and we confirm territory, scope, and proof obligations first.
Advisory / SI
Co-delivery under governed scope
Introduce an enterprise buyer; we own evidence boundaries and operator provision.
MSSP / channel
Contact for channel terms
No public SKU. Channel path opens only after operator review.
Tell us what must remain confidential, the decision date leadership needs, and the surfaces in scope. We confirm the assessment boundary before anything runs.