Cybersecurity and quantum technology solutions company SandboxAQ today announced the launch of OpenCryptography.com, a public database that maps cryptographic assets, vulnerabilities and risks across the digital ecosystem.

Offered for free, OpenCryptography.com has been designed to give enterprises, researchers and policymakers unprecedented visibility into real-world cryptographic deployments across the internet to allow them to uncover weaknesses, strengthen defenses and modernize for the post-quantum era.

The database seeks to assist with the growing challenge whereby global regulators are demanding that organizations must act to modernize their cryptographic foundations and reduce supply chain risk. As stated by the U.S. Cybersecurity and Infrastructure Security Agency, National Security Agency and National Institute of Standards and Technology in August 2023, “It is imperative for all organizations, especially critical infrastructure, to begin preparing now for migration to post-quantum cryptography. Without open, transparent tools, enterprises remain vulnerable to attacks that exploit outdated or misconfigured encryption.”

The initiative draws on more than a year of SandboxAQ research to assemble a continuously updated inventory of cryptographic assets from widely used software and infrastructure.

SandboxAQ’s database already contains almost 1 billion entries spanning open-source repositories, software containers and operating system distributions. OpenCryptography sees the release of thousands of those entries to allow users to pinpoint vulnerabilities, understand how risks evolve over time and track the adoption of next-generation cryptographic algorithms and protocols.

“OpenCryptography reflects our conviction that the status quo is no longer acceptable,” explains Marc Manzano, general manager of the Cybersecurity Group at SandboxAQ. “Cryptography needs to stop being seen as a black box or as a vendor-related problem. It is the foundational building block for digital trust. We cannot secure what we can’t see.”

OpenCryptography.com is now available for immediate use, with a launch focus on widely used open-source Docker containers. Additional features are planned to be added over time.

SandboxAQ, which was spun off as an independent company from Alphabet Inc. in March 2022, is venture-backed and has raised $950 million, including a round of $300 million on a $5.6 billion valuation in December. Investors in the company include Alphabet, BNP Paribas SA, T. Rowe Price Group Inc., Breyer Capital, Nvidia Corp., Horizon Kinetics, Eric Schmidt, TimeVentures, S32, Fred Alger Management and Paladin Capital Group.

Image: SiliconANGLE/Ideogram