I built a database that scans SSL/TLS configurations of all 3,700+ publicly listed companies in Japan and identifies quantum-vulnerable cryptography.

With NIST finalizing PQC standards last year, I wanted to see how prepared Japanese enterprises actually are. Spoiler: not very.

The data shows which companies are still using RSA/ECDSA without any quantum-resistant alternatives, making them vulnerable to "harvest now, decrypt later" attacks.

Target users: security researchers, investment funds (for risk assessment), and auditors.

Would love feedback from anyone working in post-quantum cryptography or enterprise security.