Product Launches
DuoKey Opens Free Entry Point to Live Post-Quantum Key Exchange Probing
By News Desk ·
Key takeaways
- DuoKey offers live probing of post-quantum key exchange plus STARTTLS and database TLS coverage for PostgreSQL, MySQL, MongoDB, Redis and Kafka.
- The platform generates a CycloneDX 1.7 CBOM and scores readiness with the HNDL metric, alongside per-asset scores from 0 to 10 with P0 to P4 priorities.
- DuoKey CPM, formerly the PQC Scanner, focuses on AWS production environments with Azure and GCP support in beta.
DuoKey has released a cryptographic posture management tool that probes post-quantum key exchange live and offers a free entry point to post-quantum readiness work, according to public documentation reviewed in October 2026. Quantum Zeitgeist reported the launch on October 25, 2026. The tool also covers database and STARTTLS connections and generates a CycloneDX 1.7 CBOM.
DuoKey's Live Probing and CBOM Export
DuoKey's discovery surface tests post-quantum key exchange mechanisms in real time across network and Transport Layer Security protocols, a capability the documentation says is not universally available among leading cryptographic posture management solutions. The tool probes STARTTLS and TLS connections for PostgreSQL, MySQL, MongoDB, Redis and Kafka, and scans source code repositories including GitHub, GitLab and Azure DevOps. It also inventories container images, Artifactory repositories, keystores, cloud key management systems, Securosys hardware security modules and its own DuoKey KMS.
The platform formalizes that inventory as a CycloneDX 1.7 CBOM, a standardized format for documenting a bill of materials for cryptographic components, generated through the CBOM Explorer within the DuoKey Cockpit. Migration planning includes simulation of transitions to NIST's post-quantum standards ML-KEM (FIPS 203), ML-DSA (FIPS 204) and SLH-DSA (FIPS 205), plus PQC certificate deployment with rollback. A readiness score uses the HNDL metric, and per-asset scores run from 0 to 10 with P0 to P4 priorities. "It is the quick way to learn how exposed the externally visible part of your estate is and to open the internal conversation," the documentation states.
Keyfactor, which the documentation says excels in certificate management with its AgileSec and EJBCA products, won PQC Solution Provider of the Year in the 2026 CyberSecurity Breakthrough Awards, Quantum Zeitgeist reported on October 12, 2026.
DuoKey's Funding and Certification Record
According to akta.pro company records, DuoKey opened a Series A funding round in January 2026, with Innovaud and IMD noted as related participants, to finance growth and expansion. The same records list one funding round on file, a January 2026 non-equity assistance led by Innovaud and the International Institute for Management Development. DuoKey was founded in 2020, is headquartered in Lausanne, and reports 30 or more enterprise clients across automotive, humanitarian and financial sectors.
How Rivals Approach Post-Quantum Readiness
enQase outlined a four-part framework, Identify, Protect, Govern and Adapt, to assess crypto-agility for financial institutions, Quantum Zeitgeist reported on October 24, 2026. Algorand warned that financial markets must account for quantum-risk exposure as post-quantum migration gains momentum, Blockchain News reported on October 21, 2026. DuoKey's documentation states that Keyfactor excels in breadth of discovery, IBM in air-gapped environments, Fortanix in multi-cloud key inventory and SandboxAQ in TLS traffic analysis.