Post-quantum cryptography inventory for systems that can’t be scanned live
Pequod finds the cryptography in software, firmware and network traffic — offline and without installed agents — and measures each finding against NSA’s CNSA 2.0 requirements.
The problem
- NSA’s CNSA 2.0 requires National Security Systems to use quantum-resistant algorithms for firmware signing and networking equipment by 2030, and for most other uses by 2033.
- The Department of War (DoD) has directed every component to inventory all of its cryptography — including weapons systems, operational technology, IoT and unmanned systems.
- Many of these systems run in disconnected enclaves and can’t be scanned live or run an agent. They need an inventory built from the evidence a unit already holds.
Pequod
Offline analysis
Analysis of software and firmware images — no source code or symbols needed.
Passive network analysis
Packet captures analyzed for TLS, SSH, IKE and QUIC key exchange.
Run-and-exit host sensor
For x86-64 and ARM64; leaves no agent behind.
ACAS-compatible content
NASL, .audit and YARA content for connected enclaves.
One assessment engine
Measures every finding against CNSA 2.0 and ranks it by harvest-now-decrypt-later exposure.
Standard outputs
CycloneDX cryptographic bill of materials (CBOM), CSV and OSCAL.
Built for disconnected networks
Offline installation from approved media, signed update packs, and nothing sent out of the enclave.
Who it’s for
- Defense and federal system owners preparing post-quantum migration plans.
- Manufacturers of network and industrial devices sold to federal buyers.
Services: Post-quantum readiness assessments using Pequod.
About Ishmael Cyber
Ishmael Cyber LLC is a small business founded in 2026 to help defense and federal organizations find and prioritize quantum-vulnerable cryptography.
Its two founders have 15+ and 18 years of experience on DoD (including DARPA), Intelligence Community and federal systems. Their work spans firmware and binary analysis, cryptography, application security and secure software engineering.
- Founder and Principal Investigator: 15+ years in DoD (including DARPA research programs), Intelligence Community and federal work — firmware and binary analysis, reverse engineering, application security and cryptographic R&D.
- Co-founder and Director of Operations: 18 years of experience.
Company data
- UEI: HLH8QHAAY9S3
- CAGE: 25YQ3
- NAICS: 541512
- Small business; registered and active in SAM.gov
Contact
- Email: info@ishmaelcyber.com
- Phone: (307) 487-9160
- Web: IshmaelCyber.com