PostQ Software Labs Enterprise cryptographic intelligence for the post-quantum transition

PostQ Code Scanner 1.0-Beta

PQC migration starts with knowing where cryptography lives in your code.
PostQ Code Scanner discovers cryptographic usage across source repositories and creates the code-level visibility needed to understand quantum exposure, identify migration dependencies, and plan cryptographic change with confidence.

How to evaluate Download Product Manual
  • Multi-language Crypto Discovery Identify cryptographic APIs, libraries, algorithms and usage across supported languages.
  • Algorithm & Parameter Intelligence Resolve algorithms, key sizes, modes, curves, padding and other security-relevant parameters.
  • Multi-dimensional Crypto Assessment Assess PQC readiness, CWE-linked misuse, FIPS signals, crypto-agility and cryptographic risk.
  • Source Evidence & Crypto Traceability Preserve file, line, API, parameter and related-call evidence behind every finding.
  • Crypto Operation Intelligence Group related API calls into meaningful cryptographic operations instead of isolated findings.
  • Developer & Automation Workflows VS Code, Eclipse, CLI, container, CI/CD, CBOM/SARIF/JSON and scan comparison.
Beta 2.0 / On request Custom Crypto API Catalog Define proprietary, third-party, or internal crypto APIs and teach PostQ Code Scanner how to interpret them.
Beta 2.0 / On request Crypto Wrapper & API Traceability Trace crypto meaning through wrappers, internal libraries, and exposed APIs when apps do not call crypto libraries directly.
Release stage: Beta Beta window: through UTC.
Limited scans do not require a license. To evaluate workspace and project scanning with the full Beta feature set, request a Trial License.

Choose how far you want to evaluate

Start with the evidence. Expand when you are ready.

Review real output first, then use PostQ on your own code. A license is only needed when you want to move from the limited file scan to the complete Trial Program experience.

  1. Preview product outputs

    View example reports

    Inspect the findings, source evidence, assessments, and report experience before installing anything.

    Open example reports
  2. No license required

    Try it on your code

    Download and run immediately. Scan one selected file at a time in an IDE, or up to five files per CLI or container run.

    Choose a download
  3. Trial Program evaluation

    Request a Trial License

    Unlock workspace and project scans, report updates, and the complete Beta feature set for the Trial Program.

    Request a Trial License
  4. Adopt PostQ

    Purchase the product

    When the evaluation confirms the fit, talk with PostQ about licensing and rollout for your organization.

    Contact product sales

Choose your interface

Pick the package that fits your evaluation: an IDE plugin for hands-on source review, the CLI for local or scripted scans, or the container for CI/CD execution.

Read the product overview
VS Code VSIX extension Scan and see results right in the editor, with Problems integration, history, comparison, and source navigation. Quick start guide

Download Request Trial License

Eclipse Plugin package Scan Java projects and see results right in Eclipse or Spring Tools, including markers, history, and source-linked review. Quick start guide

Download Request Trial License

CLI Command line package Run local scans, scripted checks, and CI jobs where Java and OpenGrep are installed or managed separately. Quick start guide

Download Request Trial License

Container · linux/amd64 Packaged CI/CD runtime Run reproducible CI/CD scans with Java, OpenGrep, rules, and the scanner already packaged in the image. Quick start guide

postqsoftwarelabs/postqcodescanner:1.0-Beta

Open Docker Hub Request Trial License

Check your environment first Use the prerequisite checker when you want a quick local readiness check before installing a scanner package. Download Downloads verification SHA-256 codes This is optional, recommended to make sure downloads are authentic. Download