Red-team the cryptography the mission depends on.
QHunt is authorized mission and OT red-team intelligence for the Department of War (DoW) and the warfighter. It hunts cryptographic and quantum-relevant exposure in mission, operational-technology, restricted, air-gapped, and on-premise environments — inside an explicit non-destructive operating boundary.
QHunt is not unrestricted testing. Work begins only after the operator attests to authority over the named environment, or explicit written authorization is on record, and an approved scope is confirmed.
Mission systems
Scope-bound assessment
Operational technology / ICS
Non-destructive default
Restricted / air-gapped
Operator-to-operator boundary
Authorized red-team scope
Targets · methods · stop conditions
Who it is for
Built for the people who answer for the mission.
Mission owners
Know what protects the mission link before it is tested for you.
Command, logistics, and mission-support systems carry data that stays sensitive for years. QHunt shows which cryptography protects it and where that protection is weak.
OT and ICS operators
Assess control systems without disturbing them.
Operational-technology and industrial-control environments are assessed inside a non-destructive default. Nothing that could interrupt a process runs without the published dual-attestation gate.
Authorized red teams
Add the cryptographic track to an authorized red-team scope.
QHunt runs as a separate cryptographic and quantum-relevant track inside the targets, methods, and stop conditions the red team is already authorized to use.
One governed path
Authorize. Assess. Hand off.
Authorized scope, then assessment, then an evidence hand-off. Three decisions keep mission context visible without turning the page into an operating manual.
- 01Authorize
Bind the boundary before work begins.
The operator names approved targets, methods, exclusions, evidence handling, and stop conditions. That attestation is the authorization record for the engagement.
- 02Assess
Inspect the approved mission environment.
The default mission class is maximum non-destructive. Out-of-scope activity and stop-condition crossings are refused.
- 03Hand off
Return a reviewable evidence record.
Findings stay tied to the authorized scope so mission owners can decide what moves into governed remediation planning.
Evidence without overclaim
The boundary is part of the deliverable.
QHunt is a scoped professional service—not downloadable software. A cryptography bill of materials, or CBOM, can be an engagement output. It is not QHunt itself, not a public customer inventory, and not permission to assess a mission system.
- CBOM engagement output
- A machine-readable cryptography bill of materials for the approved scope, where the engagement calls for one.
- Proof per finding
- Each finding carries the observation, the method, and the evidence behind it. An unproven observation stays labeled as an observation.
- Named blind spots
- What could not be reached inside the boundary is recorded as a gap, not left out of the record.
Policy
Read the authorization and stop-condition contract.
Open engagement policyTerminology
Understand CBOM and the mission terms before an engagement.
Open the glossaryAuthority
The operator's attestation of authority over the named environment is the authorization. It is recorded with the approved targets, methods, exclusions, and stop conditions before any work runs, and it travels with the evidence record.
What QHunt does not do
The public page stops where the mission begins.
- No mission telemetry, customer names, or engagement results on this public site.
- No classified material in public copy, samples, or demonstrations.
- No destructive action unless the published dual-attestation gate is complete.
Start with authority
Name the environment. We will define the safe boundary together.
No assessment begins until authority over the environment, approved methods, exclusions, evidence handling, and stop conditions are clear.
Scope a QHunt engagement