QScout Sample Report

See how QScout structures approved-scope evidence for executive review.

QScout Evidence Package Sample

Interactive preview of approved-scope QScout reporting

Approved Public Scope

Public intake covers the requester-authorized public-surface subset of the 74-module governed catalog across up to 10 total authorized same-domain public hosts. Qtonic Quantum Corp confirms requester authority and approved scope before assessment work runs; no self-serve public scan runs from the website.

Illustrative sample. This report uses synthetic demonstration data to show QScout structure, evidence formatting, remediation framing, and proof-console language. It is not derived from a real customer engagement.

QScout Evidence Package · Illustrative Sample

example-corp.com — Grade C · Score 72/100

74 governed catalog checks · demonstration runtime 247s · Needs Improvement

Assessment Coverage

97.3%Near-Full

72 of 74 governed catalog checks completed. Most checks completed; a small number were deferred.

Deferred (timed out): CT Log Subdomains, Public Surface Exposure Review.

HNDL Risk Score: 68/100 (HIGH)

Quantum-threat horizon: 7 years.

RSA-2048 certificates vulnerable to cryptanalytic quantum attacks
No hybrid key exchange detected
Long-lived sensitive data identified (financial records, PII)
Certificate validity extends beyond quantum threat horizon

Severity breakdown (11,535 findings)

Critical: 247
High: 1,089
Medium: 2,841
Low: 4,216
Info: 3,142

Executive summary

This assessment reveals significant cryptographic vulnerabilities requiring immediate attention. The organization's TLS infrastructure relies exclusively on classical cryptographic algorithms that will become vulnerable as quantum computing advances.

Key risks

Critical exposure to Harvest Now, Decrypt Later (HNDL) attacks targeting long-lived data
No post-quantum cryptographic protections detected across any endpoints
Deprecated protocol versions (TLS 1.0/1.1) still enabled on production systems

Recommendations

Initiate PQC migration planning within 90 days
Disable deprecated TLS versions immediately
Implement hybrid key exchange on critical systems
Generate Cryptographic Bill of Materials (CBOM) for compliance tracking

Current configuration may not meet upcoming NIST PQC CNSA 2.0 requirements (deprecated by 2030, disallowed by 2035). Board-level visibility recommended.

Top findings

Quantum Risk AnalysisCRITICAL
No Post-Quantum Algorithms Detected
Infrastructure does not support any NIST-approved post-quantum algorithms. All cryptographic operations rely on classically-secure algorithms vulnerable to Shor's algorithm.
TLS/SSL ConfigurationCRITICAL
TLS 1.0 Protocol Enabled
Server accepts connections using deprecated TLS 1.0 protocol, vulnerable to BEAST, POODLE, and other known attacks.
Certificate PolicyHIGH
RSA-2048 Key Length Insufficient for Quantum Era
Certificate uses RSA-2048 which provides approximately 112-bit security classically but zero security against quantum attacks.
HTTP Security HeadersHIGH
Missing Content-Security-Policy
No Content-Security-Policy header detected, leaving application vulnerable to XSS and data injection attacks.
Key Exchange AnalysisHIGH
Static RSA Key Exchange Supported
Server supports static RSA key exchange which does not provide forward secrecy.

Static evidence summary. Interactive charts are available when JavaScript is enabled; the decision content above remains complete without them.

QScout sample

Loading interactive evidence view…

Ready to request a QScout assessment?

This sample demonstrates QScout evidence structure and provenance labels. Request an assessment and a Qtonic Quantum Corp analyst confirms scope, authorization, and the right governed path.

Request QScout assessment View Methodology

No installation required • Approved public scope • Operator-reviewed intake

Structured Like a QScout Evidence Package

This demonstration mirrors the sections, evidence layout, and executive framing of QScout approved-scope output without exposing customer-specific data, raw operational telemetry, or deeper guided-assessment artifacts.

Inspect security posture