Find the encryption risks hiding in your clusters.
KwantumZero is an open-source Kubernetes security auditor being built for the post-quantum era. It will help teams prepare for Harvest Now, Decrypt Later attacks by finding legacy TLS, mapping exposure across the traffic edge, and showing teams what to fix before encrypted data becomes readable. The first release is being built in Go as a Kubernetes Operator, with planned support for NIST-approved algorithms — including ML-KEM (Kyber).
A focused security loop
From cluster inventory to a clear remediation plan.
The first release is being designed to give platform teams a living view of where encryption is strong, outdated, or unverified.
01
Discover
Map ingress, mesh, gateway, and certificate paths.
02
Audit
Flag legacy TLS and quantum-vulnerable key exchange.
03
Act
Prioritize fixes with evidence your team can act on.
Automated Cluster Auditing
The planned Operator will inspect Kubernetes clusters, Ingress Controllers, Service Meshes, Gateway API resources, TLS certificates, and cryptographic configurations.
Post-Quantum Enforcement
The roadmap includes checks for NIST-approved post-quantum algorithms, including ML-KEM (Kyber), hybrid TLS key exchange, and TLS 1.3.
Kubernetes Native
The planned architecture is a lightweight, read-only Kubernetes Operator written in Go, using standard CRDs with no sidecars or application changes.
Make your cluster quantum-ready, one finding at a time.
Follow development, share feedback, or talk about making your cluster quantum-ready.
Explore the project on GitHub