Black Kite Introduces Quantum Readiness Controls to Assess Third-Party Cryptographic Risk

Third-party cyber risk management platform provider Black Kite has announced the launch of Quantum Readiness, a new control set integrated into the SSL/TLS Strength category of its Black Kite Cyber Rating engine to evaluate post-quantum cryptographic (PQC) agility across third-party vendor supply chains. The feature provides organizations with external visibility into vendor cryptographic postures, identifying which third-party software, cloud, and IT providers have implemented quantum-resistant encryption methods—such as hybrid post-quantum key exchange and PQC certificate signature readiness—or remain reliant on legacy algorithms facing regulatory phase-outs. The rollout addresses mounting regulatory compliance deadlines, including U.S. Office of Management and Budget (OMB) M-26-15 guidelines mandating post-quantum key establishment by 2030 and digital signatures by 2031, Executive Order 14412 contractor migration targets, and European Union NIS2 supply chain cryptographic mandates. [ Black Kite Quantum Readiness Framework & Regulatory Benchmarks ]Assessment PillarExternal Observable SignalTarget Regulatory Compliance Driver• Key Exchange Agility• Detection of active hybrid PQC key exchange mechanisms• OMB M-26-15 U.S. Federal key establishment migration deadline (2030).• Certificate Readiness• Inspection of PQC-ready digital signature certificates• Executive Order 14412 Federal Acquisition Rule contractor standard (2030).• Asset Vulnerability Mapping• Identification of unmigrated legacy assets (RSA/ECDSA/ECDH)• NIST deprecation schedule (post-2030) and complete disallowance (2035).• Supply Chain Risk Integration• Integration into SSL/TLS Cyber Rating ecosystem scoring• EU NIS2 Directive supply chain risk management obligations (2026/2030). By automating continuous observation of external cryptographic signals across vendor supply chains, Black Kite aims to help enterprises and government agencies mitigate “harvest now, decrypt later” vulnerabilities prior to mandatory national PQC migration deadlines. Review the press release via Black Kite Pressroom here. In GQI Portal The players behind the news The team that writes QCR tracks every company, deal and technology in the GQI Factory, GQI's verified database of the quantum industry. Next up: every story linked to its players, coming to QCR's paid plans. Players →Companies and institutions across the quantum industry, by segment. Scorecards →How the players compare on hardware, software, funding and more. Newsletter QCR Alerts in your inbox The latest reporting and analysis from Quantum Computing Report. Free, unsubscribe any time. Sign up for QCR Alerts Leave a commentCancel replyAll fields are required. Your email address will not be published.CommentName Email Type in the text displayed above Δ