Use the public check only where you have permission.

Before you run a check

Only submit a domain that you own or are expressly authorized to test. Public accessibility does not by itself mean that scanning is authorized. Obtain any owner, hosting provider, customer, employee or third-party consent required for the target.

What the platform does

Q-Ready connects to the public HTTPS endpoint, observes TLS and limited HTTP metadata, and returns a time-specific report with automated advisory content. It does not attempt login, bypass controls, exploit vulnerabilities, enumerate private services, download application data or perform a penetration test.

What not to submit

Never submit passwords, private keys, API tokens, secrets, personal data, confidential information or internal hostnames. If you discover a suspected vulnerability, stop testing and use the system owner's responsible-disclosure channel.

Legal and assessment boundary

You are responsible for complying with applicable law, contracts and acceptable-use policies. In Singapore, unauthorized access to computer material is addressed by the Computer Misuse Act 1993.

Q-Ready Radar provides planning information only. It is not legal advice, cybersecurity certification, compliance advice, a guarantee of security or proof that an organization is quantum-safe.

Data handling

The platform receives the hostname and technical observations needed to return the report. Hosting and security systems may retain limited request metadata for reliability, rate-limiting and abuse prevention. The public check does not ask for or retain private keys, passwords or application data.

Platform-only boundary

Q-Ready is self-serve software for public scanning, evidence export and automated advisory. It does not provide human consulting, implementation, incident response, managed security, customer support or guaranteed remediation.