Our Portfolio

Real Projects.
Production Code.

Built and deployed by the same engineers who built PQ PDF and PQ Crypta. Every case study below is live, measurable, and ours.

Case Studies

We Ship. Real Products in Production.

The Discovery Agent — cryptographic inventory, CBOM, and post-quantum readiness assessment for the EO 14412 mandate. A 47-engine PDF forensics scanner with 6 live sandboxes, local ML, and ZERO retention. 23-engine Office scanner covering every malware-carrying format. A dual-KEM zero-knowledge messaging tool. A Rust HTTP/3 reverse proxy with PQC TLS serving this site right now. The only WebTransport speed test in the world using real UDP datagrams. A NIST-submitted wire format. Not demos — all deployed.

EO 14412 Compliance CBOM · CycloneDX 1.6 Rust · Read-Only Air-Gap Ready

PQ Crypta Discovery Agent — Every Cryptographic Asset, One Inventory

Executive Order 14412 (“Securing the Nation Against Advanced Cryptographic Attacks,” June 22, 2026) mandates post-quantum key establishment by Dec 31, 2030 and PQC digital signatures by Dec 31, 2031 — for federal systems and federal contractors. Phase one of every migration plan is a cryptographic inventory. The Discovery Agent is a single read-only Rust binary that builds it: filesystem certificates and keys, SSH keys, live TLS endpoints, database columns, F5 BIG-IP and Citrix NetScaler appliance stores, JKS/PKCS#12/Oracle Wallet/NSS keystores, and weak-crypto calls (MD5, SHA-1, DES, RC4, AES-ECB) in source across 20+ languages.

Every asset — 47 fields of full X.509 depth — is classified against real NIST OIDs as compliant, legacy, or forbidden, tagged with a remediation owner, and split mechanically into the 2030 key-establishment and 2031 signature workloads. Exports a CycloneDX 1.6 CBOM plus a self-contained compliance report — fully offline in air-gap mode with zero network access. Binaries are hybrid-signed with Ed25519 + ML-DSA-65. Hosted, offline, or fully self-hosted deployment. Stack: Rust, Tokio, sqlx/tiberius, x509-parser, pqcrypta-proxy.

7Discovery Sources
47Asset Fields
20+CBOM Languages
2030/31EO Deadlines Mapped
Explore the Discovery Agent →
PQ Crypta Discovery Agent — cryptographic asset discovery, CBOM export, and post-quantum readiness assessment
PDF Forensics Scanner ML/AI Post-Quantum NIST FIPS

PQ PDF — PDF Scanner, 47 Engines

15 static heuristic analyzers — PDF token obfuscation, XFA FormCalc auto-execute, action dependency graph (cycle detection, sleeper nodes), OCG layer cloaking (screen/print divergence), Unicode & invisible text (RLO U+202E, homograph domains), trailer chain forensics (Shadow Attack, /Root swap), codec exploit validation (CCITTFax OOB, JBIG2Globals CVE-2009-0658), physical entropy topology, image steganography (LSB chi-square, JPEG EXIF anomalies), font CharString emulator (Type 1, seac OOB), PDF/A compliance fraud, YARA (24 rules including CVE-2024-41869 + CVE-2024-45112), ClamAV, PeePDF, campaign attribution via TLSH fuzzy-hash.

6 dynamic sandboxes — Ghostscript, MuPDF, Poppler, LibreOffice Draw, Chromium PDFium, and pdf.js/Node, each with strace syscall tracing. 3 ML classifiers — IsolationForest, RandomForest, LightGBM on a 38-feature vector with SHAP explainability and a 6-parser differential engine. 6.4M+ local threat indicators (URLhaus, MalwareBazaar, ThreatFox — zero external API calls). MITRE ATT&CK mapping on every finding. 9 sanitization modes. AI forensic reports via local Qwen 2.5 1.5B — no cloud. Zero retention: cleanup runs during readfile(), not after download.

15+6+3Static/Sandbox/ML
6.4M+Local IOCs
MITREATT&CK Mapped
ZeroRetention Window
Visit pqpdf.com →
PQ PDF — PDF forensics scanner interface showing ML verdicts and MITRE ATT&CK mapping
PQ PDF — Office forensics scanner covering Word, Excel, PowerPoint, Outlook, Access, Visio
Office Forensics Scanner VBA · XLM · OLE 23 Engines Sandbox

PQ PDF — Office Scanner, 23 Engines

The #1 malware delivery vector — Office documents — finally covered properly. VBA macro extraction and deobfuscation, XLM 4.0 macro deobfuscation, OLE/OOXML structure forensics, IOC extraction (URLs, IPs, domains, hashes), ClamAV + YARA multi-signature scanning, and sandboxed execution with behavioral telemetry.

Covers every Office format: Word (.doc/.docx), Excel (.xls/.xlsx), PowerPoint (.ppt/.pptx), Outlook (.msg/.eml), Access (.mdb), and Visio (.vsd). AI-generated forensic report on every scan. 4-mode sanitization (preview, strip-macros, clean-rebuild, quarantine). Same post-quantum transfer encryption as the PDF scanner. Stack: Python, php-ole, olevba, xlrd2, pqcrypta-proxy (Rust).

23Forensic Engines
6Office Formats
XLMDeobfuscation
4Sanitization Modes
Visit pqpdf.com →
PQ Crypta — NIST FIPS post-quantum cryptography API
NIST FIPS 203/204/205 47 Algorithms Enterprise API

PQ Crypta — NIST-Compliant Post-Quantum API

Production API serving all finalized NIST post-quantum standards: ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205) — plus 44 additional hybrid and legacy schemes. The same encryption securing this site and PQ PDF. Not a wrapper — these are native implementations.

HTTP/3 QUIC via pqcrypta-proxy (Rust). Real-time threat intelligence dashboard, bot remediation, enterprise JWT auth with SSO. Full observability: custom analytics, session tracking, domain filtering, public security dashboard, automated dependency scanning.

47+PQC Algorithms
FIPS 203ML-KEM
FIPS 204ML-DSA
FIPS 205SLH-DSA
Visit pqcrypta.com →
NIST Submitted Open Source 5 Languages Wire Format

pqc-binary-format — Submitted to NIST

An algorithm-agnostic binary serialization format for post-quantum cryptographic data — submitted to NIST for standardization consideration. The problem it solves: every PQ library serializes keys and signatures differently, breaking interoperability. pqc-binary-format gives any implementation a common wire format without vendor lock-in.

47 supported algorithms. 5 language bindings: Rust, Python, JavaScript, Go, and C. Designed from the ground up for the post-quantum migration era — when organizations need to swap algorithms without rewriting their data layer.

NISTSubmitted
47Algorithms
5Language Bindings
OSSLicense
View on GitHub →
pqc-binary-format — universal post-quantum wire format
Zero-Knowledge Dual-KEM NIST Level 5 Post-Quantum

PQ Crypta Share — Dual-KEM Zero-Knowledge Encrypted Messages

Every message is independently encrypted under two NIST Level 5 algorithms: ML-KEM-1024 (lattice-based, FIPS 203) and HQC-256 (code-based, NIST 2025). An attacker must break both simultaneously — two entirely different hard mathematical problems. The only encrypted-message tool implementing dual-KEM.

True zero-knowledge: the AES-256-GCM wrap key exists only in your URL fragment — never transmitted to any server. Features: burn-after-reading, granular expiry (1 min–7 days), passphrase layer (PBKDF2, 200k iterations), integrity badge, SHA-256 preview hash fingerprint, link health check (in-memory roundtrip before sharing), self-audit mode, 4 KB block padding, and short shareable links. No account. No data retained. Stack: PHP, vanilla JS (Web Crypto API), pqcrypta-proxy (Rust).

Dual-KEMML-KEM+HQC-256
NIST L5Security Level
ZeroData Retained
ZKArchitecture
Visit pqcrypta.com/share/ →
PQ Crypta Share — dual-KEM zero-knowledge encrypted message sharing
Rust HTTP/3 · QUIC · WebTransport PQC TLS Production

pqcrypta-proxy — Rust Reverse Proxy, Built from Scratch

A from-scratch Rust Layer-7 reverse proxy implementing HTTP/1.1, HTTP/2, HTTP/3, QUIC, and WebTransport — with hybrid X25519+ML-KEM-768 post-quantum TLS (NIST Level 3) via OpenSSL 3.5+. 222 commits. 142 passing tests. Serving this site right now. Not a demo, not a fork.

6 load balancing algorithms (least-connections, round-robin, weighted, random, IP hash, least response time). Canary routing with auto-rollback. JA3/JA4 fingerprinting with replay and drift detection. WAF blocking SQLi, XSS, traversal, SSRF, and 40+ scanner probe paths. Circuit breaker, 0-RTT replay protection, PQC session tickets (ML-KEM-1024 wrapped), GeoIP blocking, ACME automation with hot-reload, OCSP stapling, Prometheus metrics, OpenTelemetry tracing. Zero-trust startup mode. Stack: Rust, quinn (QUIC), wtransport, OpenSSL 3.5+, rustls.

222Commits
142Tests Passing
6LB Algorithms
ML-KEM-768Hybrid PQC TLS
View on GitHub →
pqcrypta-proxy — from-scratch Rust HTTP/3 reverse proxy with post-quantum TLS
QUIC WebTransport speed test — first production WebTransport speed test using real UDP datagrams
First of Its Kind WebTransport · QUIC Real UDP Live

QUIC Speed Test — The First WebTransport Speed Test on the Internet

Every other speed test runs over TCP. This one uses real UDP datagrams over WebTransport/QUIC — measuring network conditions the way latency-sensitive applications actually experience them. Two servers (US East · US Midwest) with GeoIP auto-selection. Download: 12 concurrent QUIC streams, 5s/10s deep, trimmed-mean excluding ramp-up. Upload: 16 WebTransport streams, 8s/12s deep, post-warmup steady state.

Measures latency, jitter (σ of RTT), packet loss (200-datagram probe), download, and upload. Then goes further: gaming experience rating, VoIP MOS score, streaming quality, cloud/work rating, buffer bloat analysis, ISP quality fingerprint, and MTR hop visualization with GeoIP annotation. Shareable results card. Live percentile ranking vs real users tested in the last 30 days — compare-me. Free, no account. Stack: PHP, JavaScript, WebTransport API, pqcrypta-proxy QUIC operations layer (Rust).

FirstWebTransport Speedtest
Real UDPNot TCP
2QUIC Servers
MOSVoIP Score
Try the Speed Test →
Fated LLC — post-quantum infrastructure company site
Corporate Animation PQC Headers

Fated LLC — Post-Quantum Infrastructure Hub

Corporate identity site for the company behind PQ PDF, PQ Crypta, and pqcrypta-proxy. Particle network canvas with node connections, glitch typography, custom cursor with spring physics, scroll-reveal animations, tilt cards.

Space Grotesk + JetBrains Mono type system. Dark quantum aesthetic. Post-quantum security headers throughout: X-Quantum-Resistant: ML-KEM-1024, X25519MLKEM768. JSON-LD structured data.

3Live Products
ML-KEMPQ Encryption
HTTP/3Protocol
Visit fated.org →
Client Website Live in Production Local SEO St. Louis

Philibert Security Systems — Protecting St. Louis Since 1971

Complete website for one of the last independently owned alarm companies in St. Louis — 55+ years of UL-listed central-station monitoring. The homepage features a live animated monitoring panel: real-time clock, zone status grid, armed-state badge, and signal indicators that make the company's 24/7 service tangible the moment the page loads.

Full build: services, transparent pricing, commercial and residential security, fire detection, CCTV, service-area pages targeting local St. Louis search, a security Learn Center, contextual tooltips explaining certifications (UL, ESA, NFPA), and lead-capture quote forms. Fast, accessible, schema-rich, and served over the same hardened stack as our own properties. Stack: PHP, vanilla JS, CSS — no frameworks, no page builders.

1971Est. — 55+ Years
24/7Live Monitor Panel
LocalSTL Area Pages
LiveIn Production
Visit philibertsecurity.com →
Philibert Security Systems — St. Louis alarm monitoring website with live monitoring panel, built by stlweb.dev
Open Source

See the Code Behind PQ Crypta

Much of our infrastructure work is open-source on GitHub. Browse our repos, see our commit history, and judge the quality of our engineering yourself.

View GitHub →