Sample Output: What a Compass Scan Actually Produces
The findings below are illustrative — synthetic data built to match the real schema, not output from any client engagement. Real findings always stay with the client; nothing in this example was extracted from an actual scan. This exists so you know what to expect before requesting a free sample scan on your own repository.
The Risk Model
Every finding is scored against one of four tiers:
| Tier | Meaning | Score | Example algorithms |
|---|---|---|---|
| QuantumBroken | Mathematically broken by quantum computers | 1.0 | RSA, ECDSA, ECDH, DSA, DH, ElGamal (any RSA key below 15,360 bits) |
| QuantumVulnerable | Survives with doubled key sizes, not inherently quantum-safe | 0.7 | AES-128, AES below 256-bit keys, SHA-256 |
| Mitigable | Can be addressed through hybrid constructions | 0.3 | Explicitly hybrid-labeled algorithms |
| QuantumSafe | Post-quantum or already quantum-resistant | 0.0 | ML-KEM, ML-DSA, SLH-DSA, AES-256, SHA-512, SHA3-512 |
Illustrative Findings Table
| Logical ID | Location | Tier | Score | Confidence |
|---|---|---|---|---|
Signature\|RSA\|KeySize=2048 |
Auth/TokenService.cs:42 |
QuantumBroken | 1.0 | High |
KeyExchange\|ECDH\|Curve=P256 |
Network/TlsHandshake.cs:118 |
QuantumBroken | 1.0 | High |
SymmetricCipher\|AES\|KeySize=128 |
Storage/BlobEncryption.cs:67 |
QuantumVulnerable | 0.7 | High |
Hash\|SHA256 |
Integrity/ChecksumValidator.cs:29 |
QuantumVulnerable | 0.7 | Medium |
KeyExchange\|Hybrid\|X25519+MLKEM768 |
Network/TlsHandshake.cs:203 |
Mitigable | 0.3 | High |
Signature\|MLDSA65 |
Auth/NextGenTokenService.cs:15 |
QuantumSafe | 0.0 | High |
What You Get From the Free Sample Scan
The same format above, generated from a real scan of a sample of your own repository:
- Every finding's exact file and line location
- Risk tier and normalized score
- A CycloneDX 1.6-conformant CBOM, interoperable with any SBOM tooling you already run
- Deterministic output — the same scan run twice produces identical results (aside from timestamps), so findings are diffable over time
This is a sample of one repository. The full Cryptographic Baseline Audit scans your entire estate and adds the Harvest-Now-Decrypt-Later risk matrix and crypto-agility wrapper blueprint on top of it.