A public administration building and its connected services at blue hour.

Government & public sector

Government and public sector PQC assessments

A sovereign inventory, on your own infrastructure, with the 2030 milestone in view.

Keep the inventory on infrastructure you control.

Cryptoramic is developed in the Netherlands and runs on your infrastructure. Select supported collection methods for connected or isolated environments, and keep access and evidence transfer under your procedures.

Explore the assessment process

An inventory for your assessment in the Cryptoramic application, with illustrative data. — Actual application · Illustrative assessment data

Shape the assessment around your environment.

Controlled collection

Agree sources, permissions and transfer arrangements. Offline collection does not require a live connection to the application.

Traceable requirements

Review findings against selected cryptographic policies and their sources. Confirm applicability with the responsible security and compliance teams.

Supplier evidence

See available maturity reports beside identified products and versions. Missing matching evidence becomes a specific question for the supplier.

Specialist support. A direct connection.

Work with Cryptoramic directly or with a regional partner. We bring experience in regulated industries, critical infrastructure and essential services to the scoping conversation.

Meet our partners Review deployment and security

Frequently asked questions

What does Dutch guidance ask government organizations to do first?

Find the cryptography your systems use, assess the risks and prepare a migration plan. That is the starting point in Dutch NCSC guidance. Check separately which national, sector and EU milestones apply to your services.

Does the inventory data leave our environment?

The application and inventory run on infrastructure you control. You decide whether to transfer or share results. Normal inventory results include information about private and symmetric keys, but exclude their secret values by default. Check files and exports for sensitive information before sharing them.

How does this relate to the TNO market survey of CADI tooling?

The survey recommends starting with a defined test scope and checking what tools actually find. You can evaluate Cryptoramic that way on your own systems. Cryptoramic was not one of the products assessed by TNO.

Start with one representative scope.

Bring an application, a golden image, or a network segment. We’ll discuss the evidence you need and a practical first assessment, directly or with a regional partner.

Discuss your assessment