Simple pricing.
Serious cryptography.

All plans include CycloneDX 1.6 export. Prices in USD. Annual billing available on QScout Pro (2 months free). QStrike Enterprise includes a custom MSA and BAA on request.

What counts as a scan?

A single scan is one CBOM job against a defined target: an IP range (CIDR /24 or smaller), a domain + subdomains, or a single host. Scans run against active TLS endpoints using direct inspection — no passive-only mode.

Does the free tier require a credit card?

No. QRecon Free is perpetually free with no card required. You get 3 scans per calendar month, a partial CBOM (top-10 algorithm findings), and your HNDL score. Q is in private beta, so access starts with an early-access request rather than instant self-serve sign-up — the team sets up your account.

What is HNDL risk scoring?

Harvest Now, Decrypt Later (HNDL) is the threat model in which adversaries archive encrypted TLS sessions today for decryption once a CRQC arrives (Mosca's theorem: 2028–2035 consensus window). Q scores your HNDL exposure 0–100 across seven weighted factors.

Can I migrate from free to Pro without re-running scans?

Yes. All historical scan results and CBOM reports are retained in your account. Upgrading to QScout Pro unlocks full CBOM output and Mosca analysis for all previous scan data immediately.