ZentroQ — SecQDevOps Compliance & Certification

Account

Signed in as

Credit balance—

API keys

Label

Certified releases (retained)

Only releases certified with --retain appear here — the QBOM document and results, never circuit artifacts. Delete any time.

Recent usage

What ZentroQ does

Prove a quantum release is compliant — so anyone can re-check it.

ZentroQ turns a Qiskit or Qrisp build into a signed, independently verifiable CRA compliance certificate. Evidence is collected from your pipeline — your circuit source never leaves your machine.

1
Collect
A QBOM is built from your circuit — hashes, metrics and backend binding. No source code.
2
Evaluate
14 controls run against the evidence and produce a compliance snapshot (CSNAP).
3
Certify
A CRA-aligned certificate maps each control to its clause and is Ed25519-signed.
4
Verify
Every hash, signature and verdict is re-derived from the bytes — claimed statuses are never trusted.

You walk away with

A signed, clause-mapped CRA certificate
An audit bundle (AEXP) you can re-verify offline
A pass/fail gate for your CI pipeline

CRA 2024/2847 CycloneDX QBOM EUCC-aligned

A SecQDevOps · MOD-08 service.

Release evaluation

Release identifier

Compliance snapshot

Run an evaluation to populate the snapshot.

CRA certificate

No certificate issued yet.

Independent verification

Re-derives every hash, signature and verdict from the evidence bytes. Claimed status fields are not trusted.

Run a verification to check the bundle.