QROS cybersecurity services
Every QROS capability as a standalone module — internet exposure mapping (open ports, services, banners, TLS certificates), CVE attribution by version and web technology, post-quantum certificates, audits and hardening, firewall/IPS/IDS/SOC, FAIR risk assessment and AI remediation. Pick a module to see how it works, the real tools behind it and the evidence it produces.
Open Ports & Services Discovery
Discover the TCP ports a host exposes and the service behind each — SSH, HTTP(S), FTP, DNS, RDP, Modbus, MQTT — with banners and fingerprints. Free, no…
CVE & Vulnerability Attribution
Detected products and web tech are matched against the NVD CVE catalog. Search by CVE id or severity to find vulnerable hosts in seconds. Free, no login.
TLS Certificate Inspection
Read the certificate a host presents — subject, issuer, SAN, validity, algorithm and key length — and spot weak or quantum-vulnerable keys. Free, no login.
Geo & Network Context
Each host is geolocated to country and city and tagged with its operator, so you can scope exposure by organisation, country or range. Free, no login.
Web Technologies Detection
When a port serves a web page, QROS identifies the stack — server, framework, CMS, JS libraries (WordPress, Magento, Next.js) and its CVEs. Free, no login.
On-Demand Scanning
A host is not in the index yet? Search its IP or domain and QROS runs a real, rate-limited scan and indexes the result in minutes. Free, no login.
Authenticated TLS + CVE Scan
Scan designated hosts with testssl.sh and our port/banner scanner, with risk reports and priority bands. Quantum-readiness assessment for authenticated…
Post-Quantum Certificates (PQC)
Generate and validate hybrid and post-quantum certificates, CSRs and verifiable document signatures. NIST FIPS 204/205 — ML-DSA, SLH-DSA.
Verifiable Credentials (W3C VC)
Issue and verify post-quantum verifiable credentials with a shareable link. W3C VC Data Model 2.0, quantum-resistant signatures, identity cards.
Document cryptography — .qros envelopes, signatures and OTP
QROS document cryptography: hybrid .qros envelopes that sign and encrypt with post-quantum (ML-DSA, SLH-DSA) and classical keys and cert-bound OTP.
Audit & Hardening
CIS audits with Ansible/OSCAP and hardening playbooks for IPS (HAProxy WAF), IDS (Suricata/Snort) and monitoring. Real SSH execution.
Guided Assessment
Inventory of systems, departments and owners, with LaTeX reports and quantum-migration roadmaps by priority band. Post-quantum readiness assessment.
AI Remediation Agent
An assistant that explains findings and generates step-by-step remediation plans over your inventory. AI-powered cybersecurity remediation.
Firewall
Generate HAProxy frontends, backends and filtering rules — anti-Tor, anti-proxy/VPN, anti-bot, anti-scan — with TLS/SNI routing and OWASP CRS…
IPS (Intrusion Prevention)
IPS on HAProxy: WAF with ModSecurity + OWASP CRS, real-time blocking of Tor, proxy/VPN, bots and scanners, fed by Suricata IDS. Ansible-deployed.
IDS (Intrusion Detection)
IDS: deploy Suricata and Snort with tuned rule sets, alert on malicious traffic across edge hosts and feed events to the IPS and SOC. Ansible-deployed.
SOC Monitoring
SOC monitoring: OpenSearch and Grafana dashboards for firewall, IPS/IDS alerts, CIS findings and quantum-readiness posture. Ansible-deployed.
Risk methodologies — from FAIR to the military RMF
QROS applies FAIR, NIST CSF 2.0, ISO 27005, OCTAVE, ENISA, CVSS and NIST SP 800-37 RMF to quantify crypto and quantum risk and map controls.
Automatic reports and evidence for auditors
Automatic LaTeX/PDF executive reports with per-system quantum-risk scores, priority bands and per-control evidence mapped to DORA, PCI-DSS and ISO 27001.
Try this service with QROS
Explore now →