The government already named the tool.
NSM-10 named the tool category (ACDI). OMB M-23-02 defined the inventory record. OMB M-26-15 set the calendar: a migration plan in 120 days, post-quantum key establishment by the end of 2030, post-quantum signatures by the end of 2031 and cryptographic agility at every phase. EO 14306 says buy only PQC-capable products. CISA's Post-Quantum Cryptography Initiative coordinates all of it. QuantaView is the ACDI platform that answers each obligation; this page maps them one by one.
Five authorities. One migration.
NSM-10 · Names the tool category
ACDI, Automated Cryptographic Discovery and Inventory: software that discovers and inventories cryptography automatically, replacing manual audits.
QuantaView: QuantaView is a purpose-built ACDI platform: pull-only agents, 51 scanner types in the registry (endpoint, network, OT protocol, PKI, KMS and HSM, cloud, code and CBOM import), continuous discovery.
OMB M-23-02 · Defines the inventory record
Nine required data items per cryptographic asset in the federal inventory.
QuantaView: QuantaView's inventory is continuously current and exports each asset with its algorithm, location and usage evidence, the record the mandate describes.
OMB M-26-15 · Sets the calendar
Migration plan within 120 days; PQC key establishment by December 31, 2030; PQC digital signatures by end of 2031; cryptographic agility at every phase.
QuantaView: Discovery and risk scoring feed the 120-day plan; one-click, human-approved, fully reversible remediation executes the phases; continuous monitoring proves them.
EO 14306 · Sets the procurement rule
Agencies acquire only PQC-capable products in listed categories.
QuantaView: EnQuanta's cryptography is a FIPS 140-3 validated cryptographic module (CMVP #5312, Active, software-only), with the NIST PQC algorithms delivered through a CAVP-validated provider and module-boundary PQC validation in process: a validated module today, not a roadmap item.
CISA PQC Initiative · Coordinates the effort
Seven effort lines spanning inventory strategy, OT considerations, product categories and buyer guidance.
QuantaView: One platform answers the inventory, migration and evidence lines, deployable fully on-premise, including air-gapped enclaves.
The inventory is the bottleneck.
CISA's own ACDI strategy is candid: most of the mandated inventory data items cannot be collected by the automated tooling generally available. That gap is why PQC migrations stall at step zero, and it is exactly the gap QuantaView was built to close.
Continuous, not point-in-time.
Agents keep the inventory current every day; an audit document is stale the day it publishes.
Evidence-graded.
Every inventory row carries how it was observed, the difference between a claim and a record.
Machine-readable.
Live CycloneDX 1.7 CBOM export drops into the reporting the mandates assume.
The same platform deploys fully on-premise, including offline installation for air-gapped enclaves; validated through U.S. DoW programs, CAGE 7U3G1. Verify at NIST: the FIPS 140-3 module (CMVP #5312, Active, software-only), the CAVP algorithm validations behind the PQC provider, and the Quantinuum Quantum Origin entropy source (ESV #E214).
Point QuantaView at one subnet. The inventory argument ends there.
A controlled evaluation on a representative slice of your estate returns the inventory the mandate describes, in an afternoon, on your premises.