Guided Assessment

The guided assessment is QROS's multi-system inventory and quantum-readiness assessment tool. You define departments, systems, and owners, and QROS assesses each system's cryptographic posture — generating a prioritized quantum-migration roadmap with LaTeX reports and economic impact (FAIR) in €/year for the crisis cabinet.

What the guided assessment includes

• System inventory — register systems by department, with owner, algorithm, key length, exposure level
• Live scanning — systems with a host URL get a real TLS + CVE scan
• Risk scoring — per-system quantum risk score (0-100) with priority bands
• Quantum-migration roadmap — prioritized plan for migrating to post-quantum cryptography
• LaTeX report — academic-style report with the economic-risk model, per-system risk, findings and CVEs
• CIS audits — run CIS benchmark audits for systems with SSH access

Priority bands for migration

Every system is assigned a priority band based on its quantum risk score:

• Critical — internet-facing RSA-1024, expired certificates
• High — RSA-2048 on critical infrastructure (quantum-vulnerable)
• Medium — internal systems with adequate key lengths
• Low — best practices, TLS 1.3, ECDSA P-384+

What a guided assessment looks like in QROS

The guided assessment dashboard shows your systems by department, each with its risk score and priority band: