Qtonic Quantum Research
Research
Institutional research notes on post-quantum readiness and cryptographic risk governance — the platform, policy, and field signals that turn quantum security into a board-control question with a date attached.
This page is the index, not the argument. Everything below is already published on this site or under a named public source, and every entry links to the page that carries the analysis, the method, or the artifact. Nothing here restates a finding in new words.
Research notes and reports
Long-form analysis published under this desk. Each note states its own scope and its own limits on the page.
Institutional research note
June 1, 2026
The 2029 Quantum Security Race
Why post-quantum readiness is now a board-control date: the platform, policy, and field signals that make 2029 a planning marker for provable cryptographic readiness, not a Q-Day prediction.
Public research report
June 11, 2026
Harvest Now, Decrypt Later: Football's Most Sensitive Data Is Living on a Quantum Clock
A structural risk analysis of the harvest-now-decrypt-later exposure facing FIFA's global data infrastructure. A statement of analysis, not an allegation of breach. Full report available as PDF and HTML from the page.
Source map
PQC Open Intelligence Source Map
A source-backed map of public policy, standards, deployment, and exposure signals used to reason about post-quantum cyber risk. A public source counts only when it changes a decision; everything else is commentary.
Benchmarks and published datasets
Measured or catalogued work with a stated population and a stated method. Read each one's scope note before quoting a number from it.
Public index
Published 2026-08-15
Post-Quantum Discovery Capability Index 2026.5
14 products scored against 7 criteria at 56 probes per product. Rankings, methodology, findings, sources, and a corrections path are published at pqc-index.org, and the scores CSV and full report PDF each carry a SHA-256 hash.
Newsroom research release
May 8, 2026
Fortune 1000 post-quantum readiness benchmark
Public benchmark of Fortune 1000 post-quantum readiness, with methodology on the claim inventory. The number is a published research score, not a customer result and not a live telemetry feed.
Public registry
PQC leaderboard
The PQC registry ranked by Qtonic Quantum Score, with provenance labels and sortable category, FIPS, and NIST fields. Scores and leaderboard rows remain diligence evidence, not marketplace placements.
Reference dataset
Quantum-safe algorithm reference
An evidence-scoped quantum vulnerability reference that separates algorithm properties from implementation-dependent product assessments, with draft-transition context and product-level uncertainty made explicit.
Source register
Market signals
Public policy, standards, hyperscaler, and market sources mapped to the eight portfolio offerings and to the separate Lab evidence registry, without endorsement claims.
Index source material
Method and coverage
How the scoring above is produced, what it covers, and where it stops. Published before the results, so a result can be argued with.
Published rubric
Lab methodology
How Qtonic Quantum Lab evaluates PQC solutions: 10 dimensions, published weights and thresholds, evidence-based scoring, and disclosed review status.
Coverage accounting
Evidence coverage dashboard
The evidence-state dashboard for PQC evaluations, with publication coverage and signed-proof accounting labelled separately rather than merged into one figure.
Standards map
Standards and policy anchors
Published solution evidence mapped against sourced technical, policy, sector, and data-protection anchors, with scope and primary sources disclosed. Technical-review support, not legal determinations.
Control description
Scoring fidelity
How scoring fidelity is maintained: published methodology, per-dimension provenance tags, independent review controls, and transparent correction discipline.
Assessment method
Engagement methodology
How quantum risk is quantified in an engagement: Board Number scoring, provider-aligned validation, sample deliverables, and governed anonymized client proof.
Evidence you can check yourself
Artifacts built for a reader who does not take the analysis on trust. Each one is inspectable without contacting anybody here.
Evidence index
Proof Center
Inspect current release status, direct product evidence, freshness, scope, method, and public limitations.
Live release state
Release proof
Deployed SHA, Lab proof health, QStrike proof health, QScout backend health, and claim inventory for the release now serving this site.
Verification walkthrough
Verify a Lab proof receipt
How a third party re-verifies a signed Qtonic Lab proof receipt: endpoints, signature material, and copyable commands.
Planning artifact (PDF)
PQC migration roadmap
The dependency-aware migration sequence used on engagements, as a representative planning artifact — not a completion promise or a procurement endorsement.
Field analysis
Research notes and technical analysis from the archive, listed newest first. Signal briefs, board memos, and product explainers live in the full archive.
Technical Analysis
May 29, 2026
Y2K Was a Problem With the Clock. Q-Day Is a Problem With the Locks.
Y2K passed quietly because it was visible, scheduled, and testable. Q-Day is invisible, probabilistic, and retroactive — which is why harvest-now-decrypt-later makes waiting the most expensive option.
Technical Analysis
May 13, 2026
Model Output Is Not Proof
Models can guide planning. governed quantum-cloud attack-path demonstrations and QScout evidence trails create audit records that boards, CISOs, and reviewers can verify.
Technical Analysis
March 31, 2026
The $20 Million Question: Why a Special-Purpose Quantum Computer Built to Break Encryption Is Closer Than Most Enterprise Planning Cycles Assume
Two preprints collapse resource estimates for breaking elliptic-curve cryptography by orders of magnitude. A purpose-built Shor machine could cost $13-40M.
Research Note
March 30, 2026
We Just Launched an Evidence-Linked Scoring Platform for Post-Quantum Cryptography at RSAC 2026. Here Is What It Found.
Qtonic Quantum Lab scores 200+ post-quantum implementations across 10 dimensions. Average score: 51.8/100. The PQC market has a readiness problem.
Research Note
March 12, 2026
The Book That Treats Quantum Risk Like an Ops Problem, Not a Physics Debate
The Quantum Almanac 2026-2027 is now available. Written by Qtonic Quantum Research Team with a foreword by Lt. Gen. Mark E. Weatherington, USAF (Ret.), it is a migration-governance manual for institutions that hold long-lived trust. 201 pages, 20 chapters, 11 appendices.
Technical Analysis
February 28, 2026
Ethereum's Post-Quantum Plan Is Not a Crypto Story. It Is a Governance Pattern CISOs Can Steal.
Ethereum's EIP-8141 frame transactions create a native off-ramp from fixed cryptographic primitives. The enterprise lesson: build crypto agility as an interface, document how the migration path itself can fail, and produce proof artifacts before external pressure compresses your options.
Technical Analysis
February 27, 2026
Ethereum's Post-Quantum Roadmap Forces an Enterprise Question
One of the most scrutinized cryptographic systems in the world is treating post-quantum migration as a long program with real tradeoffs, staged interfaces, and documented failure modes. A 4-phase proof path with measurable outputs for enterprise CISOs.
Recorded research
Filmed work published under this desk. Both are captioned and carry a full transcript on the page.
Film · 2 min 42 s
The Harvest
Why the encryption protecting everything you trust has an expiration date, how adversaries harvest data now to decrypt it later, and what this company brings to the fight. A dramatization.
Film · 1 min 27 s
QScout: Find It First
A recorded demonstration of QScout finding cryptographic exposure, scoring harvest-now-decrypt-later risk, and packaging the result as evidence.
What this index does not do
- It does not add findings. Each summary compresses language that already appears on the linked page. Where a number is shown, it is read from the same governed source the linked page reads.
- It is not exhaustive. Guides, checklists, and explainers live in the resource library and the learning center; this page indexes original analysis, measurement, method, and evidence.
- Qtonic Quantum Corp sponsored and contributed the original evidence work and builds QScout. QScout’s row uses deeper live evidence than peer rows, which rely primarily on public documentation.
- Public research scores are not customer results and not live telemetry feeds. Where a page states its own scope and residual gaps, that page governs — not this index.