SCANOSS Adds Cryptography Inventory and Post-Quantum Readiness to Earnie Platform

SCANOSS said its Earnie code governance platform now continuously inventories cryptographic assets, traces which ones are reached in code, and flags quantum-vulnerable algorithms for enterprises preparing post-quantum migration. The company detailed the cryptography and post-quantum readiness features in a release published by EIN Presswire. Earnie publicly launched on October 6, 2026, at a live online event, and the new capabilities are available now as part of the platform.

How Earnie Scans Code for Cryptographic Assets

Earnie scans a codebase and its dependencies for cryptographic algorithms, protocols, certificates and key material. The system produces a structured Cryptography Bill of Materials, or CBOM, using the same general model as an SBOM but focused on cryptography. Each finding includes a post-quantum status that flags quantum-vulnerable algorithms such as RSA or ECDH, and a severity score from curated assessment tables published by Earnie.

Earnie traces reachability to show whether a cryptographic asset sits on a call path from an application entry point, and reachable findings are shown hop by hop in a call trace. If the analysis cannot determine reachability, Earnie marks the finding as undecided rather than guessing. The platform scans continuously on every commit and pull request, and each completed scan shows changes since the last full scan, including findings that are new, resolved, re-detected or still open.

Earnie produces an export-control evidence report alongside each CBOM, intended to support trade-compliance teams in their own self-classification. The platform recognizes more than 120 cryptographic algorithms. Detection runs inside the customer's Earnie environment, whether SCANOSS hosts it or the customer runs it on-premises, and source code never leaves that environment. Findings are deterministic, so the same code produces the same result every time.

SCANOSS Partnerships Across Europe and China

SCANOSS entered the Chinese market in June 2026 through a strategic cooperation with Beijing SanheTrust Technology, granting SanheTrust exclusive responsibility for promotion, sales, localisation and technical support across China, according to akta.pro company records. In May 2026, Glasgow-based Frontier integrated SCANOSS into Kubernetes, CI/CD and policy automation platforms for regulated enterprises in financial services, telecoms and energy. SCANOSS joined Codelab's CRA Secure Pipeline for embedded software in April 2026, integrating its open source and cryptography data layer into the DACH, Poland and Sweden markets via GitLab and SonarQube workflows.

Quantum-Safe Moves at MyDigital ID and IBM

MyDigital ID will adopt Post-Quantum Cryptography to address quantum threats, with crypto-agility and multi-factor authentication, The Edge Malaysia reported on October 15, 2026. As of October 7, 14.2 million people registered, and 82.75 million login transactions occurred since 2024, with daily usage exceeding 200,000. IBM's Europe and Africa vice-president Alessandro Curioni warned that most organizations are unprepared for quantum computing hacks, saying less than 10% are quantum-safe, The Times of India reported on October 14, 2026.

Where to Find Earnie Product Details

SCANOSS says full product details, including open source licence compliance and AI governance coverage, are available at earnie.dev. PQC migration teams can use the standing record to track algorithm replacements, deprecations and new introductions over time.