Q by Wentzel - Frequently Asked Questions

Frequently Asked Questions

This article answers common questions about Q by Wentzel, the QRecon scanner, findings, NIST PQC guidance, and migration planning. If your question is not covered here, please open a ticket through the support portal or contact your account team.

What does Q by Wentzel actually do?

Q by Wentzel helps you assess your readiness for post-quantum cryptography. It discovers where you use cryptography, helps you interpret the quantum risk associated with those uses, and supports you in planning a migration toward quantum-resistant algorithms.

What is post-quantum cryptography, and why should I care now?

Post-quantum cryptography (PQC) refers to cryptographic algorithms designed to remain secure against attacks from future large-scale quantum computers. Many widely used public-key algorithms could be weakened or broken by such computers. Acting now matters partly because of "harvest now, decrypt later": data intercepted today could be stored and decrypted later once capable quantum computers exist. Building an accurate inventory and migration plan takes time, so early preparation is valuable.

What is the QRecon scanner?

QRecon is the discovery scanner in Q by Wentzel. It inventories cryptographic usage across your in-scope systems so you can see where cryptography is used. The resulting inventory is the foundation for everything else, including findings and migration planning.

How do I run a scan?

At a high level, you define which systems are in scope and then run QRecon against them to produce a cryptographic inventory. For step-by-step guidance, see the Running the QRecon scanner article and Getting Started with Q by Wentzel in this Knowledge Base. If you need configuration help for your environment, contact your account team.

What is a "finding"?

A finding describes a place where cryptography is used and how it relates to quantum risk. Findings are intended to help you prioritize: rather than treating every cryptographic use the same, you can focus first on the areas that present the greatest exposure or are most important to your organization.

How should I prioritize which findings to act on first?

Prioritization generally balances the quantum risk a finding represents against business factors such as the sensitivity and longevity of the data involved, the importance of the system, and the effort required to remediate. Data that must remain confidential for many years is often a strong candidate for early attention, because it is most exposed to "harvest now, decrypt later" scenarios. Your account team can help you tailor a prioritization approach to your environment.

Which post-quantum algorithms should I use?

Q by Wentzel guides you toward the post-quantum standards published by the U.S. National Institute of Standards and Technology (NIST), which has run a multi-year process to select and standardize quantum-resistant algorithms for purposes such as key establishment and digital signatures. The right choice depends on your specific use case, so we recommend reviewing the relevant NIST PQC standards alongside your findings rather than selecting an algorithm in isolation. For more detail, see the NIST Post-Quantum Cryptography project.

Does Q by Wentzel migrate my cryptography for me automatically?

Q by Wentzel is focused on discovery, interpretation, and planning. It helps you understand your cryptographic landscape and build a prioritized migration plan. The actual changes to your systems are carried out as part of your own engineering and change-management processes, informed by the findings and guidance the product provides.

How long does a migration take?

There is no single answer, because it depends on the size and complexity of your estate, how cryptography is embedded in your systems, and your internal priorities. Post-quantum migration is typically an ongoing program rather than a one-time task. Q by Wentzel is designed to help you make steady, prioritized progress over time.

How do I get help?

If you have questions or need assistance, please open a ticket through the support portal or contact your account team. For common problems, also see the Q by Wentzel — Troubleshooting & Common Issues article.