Cyber ThistleCyber ThistleJoin our waiting list

Cyber Thistle Guard

Start PQC planning with evidence and clear limits.

Cyber Thistle Guard uses CBOM-first evidence from selected repositories and OCI images, with specialist guidance to help frame the next decision.

Join our waiting list See How It Works
From selected software evidenceto a bounded evidence view
webauthapidataopsmigration work
CBOM evidencescope and limits shown

Why PQC

Before you can migrate, you need to know what depends on cryptography.

Long-lived data, inherited dependencies and distributed infrastructure make cryptographic change a portfolio decision. A useful starting point is the evidence available for the software in scope, together with what that evidence cannot show.

UK guidance describes a staged move to post-quantum cryptography. That creates a planning horizon, not certainty: selected repository and OCI image evidence does not claim a complete organisation-wide or cloud inventory.

Read NCSC PQC migration guidance

How it works

Turn a cryptographic unknown into a considered next step.

01

Prepare evidence

Start with a selected repository or OCI image, retain the exact source revision and generate CBOM evidence without presenting that input as a complete estate view.

Sample dataRepository evidencepayments-service · commit 4df72ab
Source revision retainedCBOM evidenceNo runtime traffic evidence
02

Assess

A versioned ruleset interprets that CBOM evidence. The assessment view records confidence, coverage and limitations so each finding can be understood before it informs a decision.

Sample assessmentAssessment boundariesRuleset: pqc-initial-v1
Evidence confidenceNot assessedCoverage statementPartialAssessment limitationRuntime configuration unavailable
03

Plan the next step

Use the evidence to decide the next step. Broader inventory, guided migration work and reassessment can follow; implementation claims remain separate from later reassessment and independent verification.

Sample next stepMigration workFinding: exposure requires review
Exposure requires reviewWork scope to agreeReassess before verification

Technology to find the evidence. Expertise to decide what comes next.

01

Cyber Thistle Guard

Cyber Thistle Guard assesses selected repository and OCI image inputs, produces CycloneDX CBOM evidence and supports bounded PQC assessment. Results retain source, confidence, coverage and limitations.

  • Repository and OCI image assessment
  • CycloneDX CBOM evidence
  • Versioned PQC assessment
02

Specialist guidance

Use the available technical evidence to frame ownership, migration attention and practical sequencing. Broader inventory, guided migration work and reassessment can be scoped with the organisation.

  • Interpret evidence in its operating context
  • Shape a credible migration roadmap
  • Keep implementation and later verification distinct

Make the limits of what you know part of the decision.

Every useful migration conversation needs more than a risk label. This sample assessment shows how source, confidence, coverage and limitations remain alongside an observation.

Sample assessmentSample data
Source referencepayments-service · commit 4df72ab
Evidence confidenceNot assessed
Coverage statementPartial - repository evidence only
Assessment limitationRuntime configuration unavailable
Identified exposureDefined workVerified remediation

Join our waiting list

Be part of what comes next.

Join the waiting list for updates on Cyber Thistle Guard as it develops.

Your email and consent are stored with Cloudflare for product updates. To request removal, email contact@cyberthistle.com. Joining does not provide immediate product access.

contact@cyberthistle.com+44 7341 626828

Graham Hills Building (Level 6), 50 Richmond Street, Glasgow, United Kingdom, G1 1XP