Encrypted today.
Plaintext in 2035.

Same scanner. Web, terminal, CI, browser.

Pick whichever surface fits your workflow. All free, no signup, no API key. The Decryption Blast Radius API is the same one every surface here wraps.

Drop in a domain. Get a score. In seconds.

Every other PQC scanner answers a yes/no question: "is post-quantum crypto enabled?" That’s the wrong question. The HNDL question is how much past + future data unlocks when one harvested key gets decrypted. That’s a continuous score, not a checkbox — and cipherwake.io is the only tool built around it.

We don’t just scan. We remember.

Every public scanner gives you a snapshot. We give you a timeline. Every certificate we’ve observed for a domain. Every key rotation. Every score change. Every newly-appearing third-party script. SSL Labs, Hardenize, and Mozilla Observatory throw all of that away after the scan; we keep it. That history is what powers “your key rotated but your cert didn’t,” the security changelog timeline, and the confidence scoring that says “this score is based on N observations, not one lucky probe.”

It’s also free, forever, for anyone. Lookup any domain, any SPKI key, any vendor host. The full timeline is public. Disputes are public. The paid tier is monitoring, alerts, and portfolios — never the depth of the historical view.

Curated peer scans. Ranked by Decryption Blast Radius.

We run nightly scans across ~250 curated peer domains: major banks, hospitals, SaaS, federal agencies, telecoms, airlines. Public leaderboards by sector show who’s most exposed. Public watchlists slice the data thematically: longest cert lifetimes, most-reused keys, biggest wildcard surfaces.

Adversaries are already harvesting. Decryption arrives later.

Harvest-now-decrypt-later (HNDL) isn’t hypothetical. Nation-state SIGINT programs have been documented capturing and storing encrypted traffic at internet exchange points and undersea cables for years. The math says a cryptographically-relevant quantum computer arrives somewhere between 2030 and 2040 — and any encrypted record harvested before then becomes plaintext the moment it does. If your data still matters in 2038, your encryption needs to matter today.

The data with the longest sensitivity decay — medical records, financial histories, intelligence files, intellectual property — is also what adversaries care most about preserving for later. Banking sessions decrypted in 2038 still matter. PHI decrypted in 2038 still matters more.