Inventory informs a migration; it does not certify safety.

Service

Qubrisk scans authorized software and endpoints, records cryptographic metadata, produces CBOM and SARIF evidence, organizes migration work, and evaluates customer-configured policy against changes.

Customer responsibilities

You must have authority to scan repositories, images, configurations, and TLS endpoints; protect scanner keys; review evidence and confidence; test compatibility and performance; configure CI behavior; and assign appropriate owners. You may not scan systems without authorization or attempt to access another workspace.

No cryptographic assurance

Qubrisk does not provide a cryptographic primitive, certify an implementation, prove complete runtime discovery, guarantee compliance, or automatically rewrite cryptographic code. Migration decisions require applicable standards, supported implementations, testing, and professional review where risk warrants it.

Subscriptions

Paid plans renew through Stripe until canceled. Current pricing, limits, status, and renewal information are shown before checkout and in the workspace. Taxes may apply.

Availability and liability

The hosted service is subject to reasonable maintenance and security controls. The local baseline evaluator is designed to continue during a hosted outage. To the extent permitted by applicable law, liability is limited to fees paid for the service during the preceding twelve months.

Operator and contact

The contracting operator is the operator identified at checkout. Questions may be sent to the support address shown at checkout.