The platform
The Cryptographic Control Plane
Discover, migrate and monitor every piece of cryptography you run, from one sovereign control plane. NIST-aligned, deployable on-premises or air-gapped, engineered from first principles.
The console
One control plane, three products in view
A unified console brings discovery, migration planning and monitoring together: one view across your cryptographic estate.
Three products, one journey
One platform, three surfaces over a shared engine
EQCore is the platform. CipherScout™, CipherForge™ and CipherWatch™ are the three products within it, with each a surface over a shared scanner and scoring engine, carrying you from discovery to migration to monitoring.
Discover · CipherScout
See the cryptography you run
Over 50 scanners detect cryptographic posture and inventory across your network, certificates, applications and data - and emit a Cryptographic Bill of Materials (CBOM). Posture detection, not exploitation.
Explore CipherScout →
Migrate · CipherForge
From exposure to executed migration
EQCore turns the CBOM into a prioritised, framework-filtered remediation plan. CipherForge then performs the swap with its own formally verified PQC implementation: ML-KEM, ML-DSA, SLH-DSA, FRODO-KEM and McEliece.
Explore CipherForge →
Monitor · CipherWatch
Stay alerted to change
Findings become severity-scored alerts on every scan and on your schedule, routed to the tools your SOC already uses. Scheduled re-scans keep watch as your estate changes.
Explore CipherWatch →
Engineered end to end
EQCore is one platform: discovery, migration and monitoring, built end to end by ExeQuantum. From cryptographic posture to post-quantum remediation, it is our own technology, engineered for sovereign environments.
One control plane
One pane of glass across your cryptographic estate
A multi-tenant platform where the three products are surfaces over a shared scanner and scoring engine, so discovery, remediation planning and alerting all draw on the same inventory and the same severity scoring.
01
Shared engine
CipherScout, CipherForge and CipherWatch read and write the same findings, CBOM and control mappings, with no hand-off seams between tools.
02
Multi-tenant by design
Per-organisation access, plan-based feature gating, marketplace add-ons and per-tenant database isolation.
03
One severity model
A single scoring engine feeds both alerts and remediation, with NIST control mapping on every scanner: one consistent view of risk.
Sovereign by design
Runs entirely within your boundary
Deploy EQCore as a SaaS console or as a sovereign on-premise “box”, whether cloud, on-premise or air-gapped. A sovereign, data-residency-preserving architecture keeps your keys and data within your environment.
On-premises box
Your sovereign discovery node
As easy as installing an app from the app store: download the signed bundle, verify it, run it. The on-premises box then maps your network and runs discovery, posture monitoring and prioritised remediation guidance across your estate. Scan data, findings and estate mapping stay within your network. Deploy the profile that fits your requirement: Standard, Air-Gapped, Pentest, Lightweight, IoT or Custom.
On-premises discovery
Discovery inside your network
Cryptographic discovery and topology mapping execute inside your network, so scanning never reaches out to us, including fully air-gapped estates.
Data residency
Your keys and data stay put
Per-tenant database isolation, central egress guards on scanner sockets and target-bound, server-whitelisted scans keep everything within your environment.
Sovereign by deployment and isolation
EQCore keeps your keys and data inside your environment: scan data written to your own database, backed by signed-bundle verification, per-box TLS and egress-controlled discovery. Sovereign across every deployment, from SaaS to fully air-gapped.
MARKETPLACE
Fits the tools you already run
The EQCore marketplace plugs into the infrastructure you already run: cloud key stores, identity, certificate tooling, SIEM and ITSM. Discovery, remediation and alerting flow straight into your existing estate. Add-ons extend it further, from AI-assisted reporting with your sovereign AI model to OWASP web application scanning. The reporting add-on sends only structured findings metadata to your chosen model, keeping keys and data inside your environment.
Next · Discover
Start with discovery
Every journey on the control plane begins with seeing what you run. CipherScout discovers the cryptography across your estate and turns it into a Cryptographic Bill of Materials (CBOM).
Explore CipherScout →
Take control of your cryptography
See the control plane across discovery, migration and monitoring, on your infrastructure.