Qvoyant

Qvoyant provides a software supply chain security platform focused on Software Bill of Materials (SBOM), Cryptography Bill of Materials (CBOM), and Post-Quantum Cryptography (PQC) readiness. The platform consolidates visibility into software dependencies, cryptographic assets, and compliance status within a single system. The SBOM component automatically discovers direct and transitive dependencies from repositories, containers, and build artifacts, correlating components with known vulnerabilities and malware while assessing code reachability to prioritize actionable risks. It integrates with development pipelines such as GitHub, GitLab, Azure DevOps, and Jenkins, and can enforce policy guardrails to block builds containing critical vulnerabilities or restricted licenses. The CBOM component catalogs cryptographic algorithms, keys, and certificates across an organization's application portfolio, identifying outdated or weak cryptography such as MD5, SHA-1, and RSA-1024. The PQC readiness offering helps organizations plan migration to NIST-approved post-quantum algorithms (such as ML-KEM and ML-DSA) using crypto-agility abstraction layers that allow algorithm changes via configuration rather than code rewrites, while supporting coexistence of classical and quantum-safe algorithms during transition periods. Qvoyant also provides compliance reporting mapped to regulatory frameworks including RBI Master Directions, SEBI CSCRF, CERT-In guidelines, and the EU Cyber Resilience Act, targeting regulated sectors such as banking, financial services, and critical infrastructure, with particular reference to India's National Quantum Mission timelines.