Explainers

How much does a PQC readiness assessment cost in NZ?

by Simon McCorkindale

In short

Kaysec publishes two fixed prices for a post-quantum cryptography (PQC) readiness assessment in New Zealand: an Exposure snapshot at NZ$4,500 + GST, which takes about two months, and a full Readiness snapshot at NZ$12,500 + GST, which takes about three to four months. A one-minute external check is free.

Exposure snapshot, NZ$4,500 + GST

The outside view. It covers:

  • an external read of every public domain, mail exchanger and certificate you run
  • a discovery session
  • a shelf-life inventory of your most important datasets
  • an NZISM 2.4 gap check
  • a short written report with a priority order.

It takes about two months.

Full readiness snapshot, NZ$12,500 + GST

Everything in the Exposure snapshot, plus the inside view:

  • an inside cryptographic inventory of the systems that protect your long-lived data: keys, certificates, libraries and protocols
  • a supplier readiness check using industry-standard vendor questions
  • a frozen point-in-time baseline for future re-scans
  • a board-ready report
  • a leadership briefing.

It takes about three to four months.

The free check

The free external posture check is a one-minute read of your website and email encryption. It touches nothing internal and gives a plain characterisation rather than a score: hybrid post-quantum, classical, or older than that.

Which one to choose

The Exposure snapshot answers what the internet can already see and which datasets matter. The full Readiness snapshot adds what only your own people can show us: the keys, certificates, libraries and protocols inside, and where your suppliers stand. Either one ends with a priority order, including where there is nothing worth acting on yet.

What comes after

The snapshot is the first of three steps, and you can stop there. The second is a migration roadmap and implementation for the systems that warrant it. The third is continued advising and monitoring, with regular re-scans against the baseline. The three steps are set out under services, and the reasoning behind them in Why get ready?.

See the readiness snapshot, or run the free external posture check.