Nine sectors.
Three remediation tiers.
Every regulated estate has its own crypto deadlines. ResilQ ships sector calibrations and remediation playbooks tuned to the regulatory pressure each industry actually faces.
A staged path from broken to quantum-safe.
Stop the bleeding
TLS 1.2+ minimums, SSH KEX cleanup, deprecated cipher suite removal, certificate rotation. Quick wins, days not months.
Buy time
LUKS upgrade, database TDE, KMS-backed keys, hybrid PQC TLS where supported. The pragmatic middle ground.
Quantum-safe
ML-KEM, ML-DSA, SLH-DSA. Hybrid PQC TLS on every edge. Signed PQC binaries. The end state.
Sector-specific coverage.
National security & military
TIBER-LT aligned, CNSA 2.0 deadline-aware. Sovereign on-prem deployment is the default for this sector.
- Frameworks
- TIBER-LT · CNSA 2.0 · NATO CIS
Public sector & KII
NIS2 essential entities, Lithuanian KSĮ scope, eIDAS Regulation. Sector calibration lives in Vilnius.
- Frameworks
- NIS2 · KSĮ · eIDAS · ENISA
Banking & insurance
DORA in force since January 2025. PCI DSS 4.0 cryptographic strength requirements. Vendor crypto attestation.
- Frameworks
- DORA · PCI DSS 4.0 · MAS TRM
Hospitals & medical
GDPR Article 32 cryptographic appropriateness. HIPAA equivalents. Long data shelf-life raises Rest-layer pressure.
- Frameworks
- GDPR Art. 32 · HIPAA · ISO 27799
Operators & carriers
ENISA 5G toolbox. NIS2 essential. Long-haul transport cryptographic posture and inter-PLMN signalling.
- Frameworks
- ENISA 5G · NIS2 · ETSI ZSM
Grid & OT
IEC 62443-zoned topology. Wind, BESS and substation operators. OT/IT crypto convergence is the priority.
- Frameworks
- IEC 62443 · NIS2 · NERC CIP
Universities & research
GÉANT alignment, eduGAIN federation. Research-data shelf-life is generational; Rest-layer scoring is critical.
- Frameworks
- GÉANT · eduGAIN · ISO 27001
Mobility & logistics
ISO/SAE 21434 for automotive. Aviation EUROCAE ED-202A. Maritime IACS UR E26/E27. Long-life embedded crypto everywhere.
- Frameworks
- ISO/SAE 21434 · ED-202A · IACS UR
Commerce & payments
PCI DSS 4.0. SCA / 3DS2 cryptographic strength. Loyalty & identity systems are the silent Rest-layer load.
- Frameworks
- PCI DSS 4.0 · PSD2 SCA · ISO 27001
A reproducible sector test lab.
Each sector calibration is validated against a Proxmox-based replica of a representative organisation in that sector — built from infrastructure-as-code (Ludus + Ansible) and rebuilt from scratch on every release. We run the audit against the lab, verify the score, and ship.