Two things this time: a new compliance report for post-quantum cryptography, and a redesigned weekly PDF report.
Attackers can record encrypted traffic today and decrypt it once quantum computers are powerful enough. This is called "harvest now, decrypt later", and it is the reason quantum-safe encryption matters now, not in ten years. The new Post-Quantum Cryptography Readiness report shows for each of your servers whether its encryption is quantum-safe.
We check web encryption (TLS) and remote login (SSH) on every server. Each server gets one of five statuses: Quantum-safe, Partly quantum-safe, Outdated version, Not quantum-safe, or Not checked yet. It also gets a score from A+ to F. Those scores are averaged into one score for your organisation.
Addresses behind a service like Cloudflare show that service's settings, not your own server's. The report marks these, and gives a separate score for your own servers, so a CDN doesn't hide (or inflate) your real position.
You can get the report with the query $post_quantum_cryptography_report, or activate it from the report library. More details are in the documentation.
The weekly PDF report that lands in your inbox on Monday morning has a new format. It now includes a summary of:
The goal is a more actionable report with better insight into how to reduce your risk. The previous format had too many long rows of results, which for some of you made it hard to see where to start. The new format gives you the overview first. The full detail is still one click away in ShadowTrackr, and you can still use the individual reports to get every row.
The weekly PDF is still the only report that is emailed by default, and you can add as many recipients as you like. They don't need a ShadowTrackr account.
Please let us know what you think. If something is missing, unclear or just not useful, send us feedback. We use it to decide what to improve next.