Why we exist
Most of the encryption that protects the internet today, RSA and elliptic-curve cryptography, can be broken by a large enough quantum computer. No one knows exactly when that machine will exist. But data recorded today can be stored and decrypted later, so the risk starts now, not on the day the machine arrives.
Governments have set dates. NIST has published the replacement standards (FIPS 203, 204 and 205). US national-security buyers must require post-quantum support from January 2027, and NIST plans to deprecate RSA and elliptic-curve algorithms after 2030. Banks, agencies and defense primes have started asking their suppliers a simple question: where are you on post-quantum?
Most suppliers can't answer it with evidence, and most buyers can't check the answers they get. Shorward exists to close that gap with a measurement both sides can trust.
Who we are
Shorward is a small, independent company focused on one thing: measuring post-quantum readiness. We are not a consultancy and we don't sell migration work, so we have no reason to make a result look better or worse than it is.
Much of the scanning, monitoring and report writing is done by software, including AI. We explain how on How we use AI.
Shorward is operated by Media Yard LLC, PO Box 73, Pennsauken, NJ 08110, USA.
What we do, and what we don't
We do
- Scan public endpoints for protocol versions, key exchange and certificate algorithms
- Check uploaded evidence against the published rating method
- Report what we measured, with dates
- Re-check on a schedule and report every change
We don't
- Advise, recommend or carry out changes
- Log in to your systems or run intrusive tests
- Scan domains an account holder hasn't verified for monitoring
- Sell or share your data
What we hold ourselves to
- Evidence over opinion. Every level in a report points to the scan result or document behind it.
- An open method. The rating method is public and versioned, and stricter changes come with 90 days' notice.
- Reporting, not advice. What to do with a finding is your team's decision.
- Least data. We collect only what a measurement needs, and we list every provider that touches it on Subprocessors.
Where we are
Shorward is in private beta. We invite teams from the waitlist in small batches. Questions go to [email protected].