Qopanza reads the JavaScript your site already sends to every visitor and reports what a stranger could pull out of it — API keys, database credentials, tables anyone can read. Then it tells you which of your cryptography a quantum computer breaks.
Thirty seconds. Nothing is installed, and nothing is fetched that your site does not already send to anyone who opens it.
Built on the published standards
Today
Published source maps, service-role keys in client bundles, credentials in a config object someone forgot was public. No cryptography knowledge needed to understand the answer, and no quantum computer needed for it to matter.
By 2033
RSA and elliptic curve cryptography are broken outright by a quantum computer running Shor's algorithm — at any key size. Traffic recorded today can be opened the day one exists, which is why long-lived secrets are already late.
For developers
The same API the dashboard runs on, as plain JSON over HTTPS. The first encrypt creates a managed ML-KEM key for your account, so there is no key management to learn before your data is protected.
import os
from qopanza import QopanzaClient
client = QopanzaClient(api_key=os.environ["QOPANZA_API_KEY"])
sealed = client.encrypt(plaintext=b"card ending 4242")
client.decrypt(**sealed) # b"card ending 4242"It costs nothing, needs no account, and you will know in half a minute whether there is anything here for you.