BPxAI
Ronway Scanner

Know your quantum risk before it knows you.

Ronway is the first Philippine-developed post-quantum cryptography scanner. It probes the public cryptographic surface of any system you nominate — TLS, certificates, signing infrastructure, key-exchange protocols — and returns the proportion of that surface that will not survive the post-quantum transition. The scan is free. The remediation plan is the consultation.

ronway · scan
v0.4.2-beta
>
ENGINE: Rust 1.78 · stableAGAINST: NIST FIPS 203 / 204 / 205AVG SCAN: 38s

Public surface only · No signup · Free at point of use · Limited-release beta

How It Works

Three steps to a resilience number you can defend.

Ronway is built as the first scan in every BPxAI Quantum engagement. It is also available as a free, public tool — so the institutional conversation can begin before procurement does.

Step 0101 / 03

Scan

Paste a URL. Ronway probes the public cryptographic surface — TLS, certificates, signing algorithms, key-exchange protocols — in under sixty seconds.

Step 0202 / 03

Review

Receive a resilience score, a letter grade, and three high-level findings. Categories of exposure are visible; the algorithm-mapped remediation plan is not.

Step 0303 / 03

Book

Schedule a sixty-to-ninety-minute working session with our partners for the full exposure map, sector-aligned context, and a written remediation brief within seven days.

Scan Coverage

What Ronway reaches from the public surface.

Ronway scans what an institutional adversary could see from the outside. Internal HSMs, key-management systems, and air-gapped infrastructure are out of scope for the free scan — and are where the paid consultation begins.

01

TLS Configuration

Negotiated version, supported cipher suites, downgrade resistance, and forward-secrecy posture.

02

Certificate Chain

Signing algorithms, key sizes, validity windows, CA trust path, and revocation infrastructure.

03

Signing Algorithms

RSA, ECDSA, Ed25519 detection — scored against ML-DSA and SLH-DSA migration readiness.

04

Key Exchange

RSA, DHE, ECDHE protocol use — flagged for Shor-vulnerability on a cryptographically relevant quantum computer.

05

Security Headers

HSTS, CSP, Frame-Ancestors, Permissions-Policy, and transport-binding integrity.

06

PQC Readiness

Hybrid PQC negotiation indicators, ML-KEM handshake support, and post-quantum protocol presence.

Ronway does not exploit. It probes the same surface a standards tool like SSLyze or testssl.sh would, scoring the result against NIST FIPS 203 / 204 / 205 readiness.

Beyond the Free Scan

The detailed exposure map is the next conversation.

A Ronway consultation is a sixty-to-ninety-minute working session with our cryptographic partners — full exposure map, internal-surface walkthrough, migration sequence proposal, and a written remediation brief delivered within seven days.