Docs

Every section of the report explained — what to look at first.

After every scan you can open the full report at /report/<scan_id>. Here's how to triage it in under a minute.

Section 1 — Headline tile

Three numbers matter:

  • Quantum Score (the big one)
  • Tier (Critical / High / Moderate / Low)
  • USD at risk (only counts balance sitting on exposed pubkeys)

If the Tier is Critical and USD at risk > 0, treat it as an incident. Migrate funds before doing anything else.

Section 2 — Factors

Each factor is a single contributor to the score. Common ones:

  • "Pubkey re-used" — you've spent from this address; pubkey is forever public
  • "Signature scheme exposed" — ECDSA on this chain (most chains)
  • "No KMS/HSM" — signing happens in a hot wallet
  • "Pre-Taproot address" — Bitcoin only; Taproot reveals pubkey on first spend

Click any factor to read its full methodology citation.

Section 3 — Advisor narrative

Plain-English summary written by Claude. Useful for sharing with non-technical stakeholders or pasting into a Slack thread.

Section 4 — Migration checklist

Suggested next actions, ordered by impact. Common items:

  1. Move funds to a fresh PQC-ready address
  2. Rotate KMS keys to ML-DSA / SLH-DSA backed signers
  3. Add the wallet to Atlas for continuous monitoring
  4. Generate a signed compliance receipt (Pro/Team plans)

Sharing the report

  • Public verify URL — /verify/<scan_id>. Anyone can confirm the report is genuine without seeing your private data.
  • PDF download — Pro plan and above.
  • Embed badge — drop on your README.md or marketing page.