Score
From 0 to 100, explainable and reproducible, with signal coverage stated.
Learn more01Quantitative research and intelligence
The intelligence layer for the post-quantum world.
GWK measures how much of each organization's encrypted information remains exposed to quantum computers, and for how long that matters. A published formal model, applied to organizations across 15 sectors.
80,182 organizations in the Oct 7, 2026 publication · formal model published on arXiv
How it works
From public signal to a comparable measure.
No agent, no credentials, no access to internal systems. Collection observes what the organization already exposes online and, where applicable, takes in declared information. IEQ organizes that evidence into three dimensions — cryptographic vulnerability, observable exposure, and confidentiality horizon —, adjusted by a governance factor, produces a measure with stated coverage, and places it on the sector scale. That structure is what GWK's applications reuse.
Sector comparison
The organization's position against aggregates from its own sector, with the benchmark and cutoff date stated.
Learn more02Evidence and priorities
The dimensions of the result, with the evidence behind each one. Where to start, and how urgently.
Learn more03Decisions it supports
The question changes by audience. The evidence doesn't.
Boards, security, risk, migration, and research teams ask different questions. The same quantitative structure answers each one; every card leads to the answer and the application behind it.
- Board and executivesI need to explain the risk without a cryptography lecture.Exposure ReportSee what reaches the board
- Security and infrastructureI want to see the evidence behind the number.Exposure ReportSee CISO priorities
- Risk and complianceIs my sector better or worse than average?Sector BenchmarkExplore sector benchmarks
- Migration programWhat does a migration program change in the result?PQC Readiness TrackSee the PQC Readiness Track
- Research and auditI want to review the method before relying on it.Published IEQ methodologySee the criterion and its provenance
IEQ applications
Five products. One shared measurement.
One scientific and data foundation, applied to different decisions. Three products are in production; two are on the roadmap.
Available now
Sector benchmarkOperations Panel
global cohort80,182
sectors15
cutoffOct 7
anonymity floorK=30
Median exposure by sector
98959593887066
Published aggregate under an anonymity floor: cohort medians, no individual organization.Composition by sector
Critical industry · 19%Retail · 18%Healthcare · 13%SaaS · 10%
Who is GWK
Deep research, direct product.
GWK Security produces quantitative intelligence on cryptographic exposure. IEQ is the core instrument: a published formal model, collection at scale, and versioned publications that feed the products and the GWK Insights analyses. GWK also supports interpreting the results in the context of each decision.
View publications
Matheus Rufino
Founder & CEO
PhD in Physics
Leads the scientific and strategic direction. Principal author of the IEQ formal framework.
Rafael Duarte Marcelino
Founder & CTO
Mechanical Engineering · MBA in Data Science
Data architecture, analytics, and platform engineering for IEQ. Experience in regulated sectors.
Julio Smanioto Garcia
Founder & CSO
MSc in Physics
Scientific front for QKD, post-quantum cryptography, and the interface with experimental research.
Publications
The methodology can be read, tested, and reviewed.
The founders' research develops and documents the method IEQ puts into operation. Publishing it opens the method and its limits to review.
IEQ formal basis
Vulnerability and exposure multiply: without either there is no HNDL attack, and the score saturates as defense meets attack.
arXivTemporal drift in QKD
A drift inside the block vanishes in the global average. The minimal detectable drift falls as 1/√n, and a calibrated CUSUM reaches that limit.
arXivIEQ 2026-S1 technical report
Across 39,903 organizations, vulnerability is nearly uniform across sectors; data horizon is what separates the three priority blocks.
DOIGWK Insights
Evidence to inform
your next decisions.
Market intelligence · 8 min read
Similar credentials. Different exposure. How to price the difference.
GWK's independent analysis assigns IEQ 2.2 to hubspot.com and 35.7 to freshworks.com. Separately, the article shows how to convert an exposure difference into value, using hypothetical economic scenarios with explicit assumptions.
Read the analysisCryptographic exposure · 7 min read
HNDL: the confidentiality horizon is part of security
Assessing cryptographic exposure means considering how long information will remain valuable. GWK's approach brings this temporal dimension into the interpretation of technical signals.
Read the analysisNext step
Use GWK intelligence.
IEQ applications are used on the GWK platform, with account access provisioned by GWK. With it, you look up the organizations in the publication, use the available products, and analyze domains not yet in the base.