Reading the bench

Reading the bench…

Shorwatch

Shorwatch reads the certificate a server is actually serving, corroborates how long that exact key has been public in Certificate Transparency, and computes a post-quantum harvest deadline you can triage and export.

Star on GitHub

Product

Watches
Analysis
Standards
Export
Agent
Verify
Settings

Project

MIT License
Contributing
Security policy
Issues
Agent tools

Shorwatch reports measured facts and an explicitly published model. The cryptographically-relevant-quantum date is an order-of-magnitude educational projection, not a forecast, and nothing here is security advice. Validate every migration decision with your own cryptographic review and current standards guidance.

takeaway

Leave with something you can act on

An export is not a screenshot. It is an OpenSSL 3.5 configuration generated from the key you actually measured, a runbook that prints the deadline arithmetic so it can be audited, and a JSON dossier carrying every seal.

Migration runbook

Plain text with the measurement, every factor, the ordered plan and the anchors.

unavailable

OpenSSL 3.5 configuration

Hybrid key-agreement groups and signature algorithms, sized from the observed key.

unavailable

JSON dossier

Machine-readable record with provenance, engine results and seals.

unavailable

Nothing to export yet

Add a watch and let Shorwatch measure it. The export is generated from what was actually observed, so there is nothing to show until then.

Open the workspace