CipherShift365 — Platform Overview

CipherShift365 is a post-quantum cryptography (PQC) readiness and migration platform for the .NET and Azure estate, built by 365Architect (www.365architect.com).

It provides four lifecycle modules — Compass (Discover), Vault (Migrate), Guardian (Monitor) — over a Shared Core, plus an on-prem Portal engagement tier.

Architecture

Hardware / Environment Requirements

Authentication Model

CipherShift365 is designed for on-premises, single-tenant, air-gapped deployment. Authentication uses:

1. Local Identity Provider — built-in JWT token service. No external IdP required.
2. Three pre-seeded roles: Executive, ConsultantAdmin, Auditor
3. Token endpoint: POST /v1/auth/token with { "clientId", "secret" }
4. Customer SSO federation is deferred (architecture supports OIDC/JWT plug-in)

To authenticate against the API:

# Get a token
curl -X POST http://localhost:5000/v1/auth/token \
  -H "Content-Type: application/json" \
  -d '{"clientId":"admin-001","secret":"any"}'

# Use the token
curl http://localhost:5000/v1/findings?project=. \
  -H "Authorization: Bearer <token>"

Where to Run

How to Run the API + Portal

# Set the API base URL for the portal (when running separately)
export ApiBaseUrl=http://localhost:5000

# Start the API
cd src/Portal/CipherShift365.Portal.Api
dotnet run --urls http://localhost:5000

# In another terminal, start the portal
cd src/Portal/CipherShift365.Portal.Web
dotnet run --urls http://localhost:5001

The portal reads ALL data through the REST API — no direct file or database access.

Documentation Topics

Discover more about the platform's high-level strategy, scenarios, and architecture decisions:

• Product Description — Executive overview and problem statement.
• Use Cases — Actors, scenarios, and traceability.
• Architecture Overview — Composition, viewpoints, and component decomposition.
• Architecture Decisions — ADR-001 through ADR-008.
• Quality Attributes — Scenario-by-scenario verification of reliability, safety, and performance.
• Strategic Decisions — Key product roadmap and strategic design choices.
• Sample Output — An illustrative CBOM showing the risk tiers and finding format a Compass scan produces.

Complete Product Inventory & API Reference

Pricing & License

CipherShift365 is available as a consulting-engagement platform by 365Architect. It is not sold or distributed as standalone software — 365 Architect is not a software vendor.

Free Sample Scan: For qualified prospects, 365 Architect will run Compass discovery against a sample of your repository — on your infrastructure, under NDA — and share the resulting Cryptographic Bill of Materials (CBOM). No charge, no obligation, no software changes hands. You keep the data. Request a sample scan →

Full Engagement: The Post-Quantum Cryptography & Infrastructure Hardening audit ($48,000 flat fee, 4 weeks) covers full-estate CBOM generation, an HNDL risk matrix, and a crypto-agility wrapper blueprint — delivered as a branded report, generated and handed over via NestVault365. Contact www.365architect.com for engagement scope and terms.

Third-party library licenses:

• QuestPDF — Community tier (free for <$1M revenue organizations)
• BouncyCastle — MIT license
• Roslyn (Microsoft.CodeAnalysis) — MIT license
• Syncfusion — available as alternative PDF engine (Community license for <$1M revenue)