Q vs Tunnelless

Q-Shield Sentinel: post-quantum readiness, honestly assessed. YOUR SCORE, 0–100 Three short question screens give you a 0–100 Quantum Resilience Score across five weighted axes: algorithm vulnerability, key-length safety, migration readiness, data exposure and compliance gap. Each result shows the algorithms most at risk, a radar chart, a prioritized roadmap to the NIST post-quantum standards (ML-KEM, ML-DSA, SLH-DSA), your Q-Day estimate and harvest-now-decrypt-later (HNDL) exposure, plus the scoring-method version and the basis of its numbers (your inputs, a model estimate or a what-if scenario). Your first score needs no account: one a day per device. Until then, a result marked "Sample" shows what you will get. CHECK A DOMAIN (NEW) • On the Score tab, enter a domain you control. Q-Shield makes one TLS handshake to its port 443 and shows the protocol, cipher suite, certificate key, signature algorithm and expiry. • This is shown apart from your answers: the score from your answers, and the score with the observed input. The observed key can only lower your score or keep it the same — never raise it. • Nothing else is probed, and the certificate itself is not stored. • Sign in to use it, on any plan, including Free. Up to 10 checks a day. QUESTIONNAIRES (SENTINEL ECHO) • Paste the post-quantum questionnaire a customer sent, or import a text file. Echo sorts each question by topic, from crypto inventory to suppliers. • It drafts an answer only where your assessment or saved scans back it, citing that record, so you can check it before sending. Other questions come back blank, with the reason; pricing, contract, SLA and supplier questions are marked "only you can answer this." • Not AI: fixed rules — the same questionnaire always gives the same result. • Keys, certificates or passwords pasted by mistake are caught on your device before upload. Export the answers as a document. ADVANCED TOOLS AND SIRI (More tab) • Source freshness for NIST, the GRI threat timeline, arXiv, your domain and your last assessment. • HNDL threat map (figures: Professional and Enterprise), labelled as a model estimate, not measured traffic. • Penetration simulation (Professional and Enterprise): eight Shor attack-vector scenarios against your declared algorithms. • Siri: security health check, threat explanation, audit log — status only, never secrets. PLANS • Free: 3 assessments a month, recent history, 1 questionnaire sorted a month, and domain checks. • Professional and Enterprise add the 22-page PDF Simulation Assessment Report and higher monthly limits — Professional: 100 assessments, 20 PDF reports, 200 penetration simulations, 100 Echo drafts; Enterprise: 500, 100, 1,000 and 500. • Plans are managed by your organization's administrator. Existing subscribers keep their access and can restore it under More › Your plan. A SIMULATION, NOT A CERTIFICATION A deterministic, rule-based simulation mapped to NIST post-quantum standards — not an infrastructure audit, not a certification authority. RSA and ECDSA are not called broken today; they are exposed to data harvested now for later decryption. Q-Shield never asks for or stores your private keys, plaintext or passwords. Results are estimates, not a security certification, and do not guarantee protection against quantum attacks. Decisions based on them are your responsibility. EULA: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Requires iOS 26 or later. Also on Mac. In 7 languages. Terms of Use: https://swiftquantum.tech/terms/ · Privacy Policy: https://swiftquantum.tech/privacy/

Tunnelless puts your iPhone, iPad, or Mac on your private Tailscale network without installing a VPN profile. Apps that reach a private network normally need a system VPN: a NetworkExtension, an "Allow VPN configuration" prompt, and a profile that takes over device-wide routing and conflicts with any other VPN you already run. Tunnelless does none of that. It runs a userspace network node inside the app and exposes a local SOCKS5 proxy, so only this app's traffic uses your private network. The rest of your device is untouched, and you can keep running your work VPN at the same time. WHAT IT DOES • Joins your existing Tailscale network with a standard browser sign-in • Shows your node's private IP address once connected • Exposes a local SOCKS5 proxy address for reaching machines on your network • Signs out and deletes local state on demand REQUIREMENTS • A Tailscale account. Tunnelless connects to a network you already have. It is not an account, hosting, or subscription service, and it does not create networks for you. PRIVACY Tunnelless collects no data, includes no analytics, and performs no tracking. Sign-in happens directly with Tailscale; your credentials are never seen by us. Network state is stored only on your device and is removed when you sign out. Tailscale is a registered trademark of Tailscale Inc. Tunnelless is built by Indiagram LLC and is not affiliated with, endorsed by, or sponsored by Tailscale Inc.