Simulate your PQC migration on a real endpoint before touching production.
pip install pqc-sandbox
pqc-sandbox simulate your-api.com
It probes your TLS endpoint and proves what breaks when you migrate
to ML-KEM/ML-DSA — cert chain size, ClientHello fragmentation,
DNSSEC limits, HSM firmware gaps — with a copy-paste fix for each.
ML-DSA-44 sigs are 33× larger than ECDSA. On a standard nginx setup
that single fact blows past the 8KB proxy limit. Nobody finds this
until they're mid-migration.
Free, open source, zero telemetry.
🔗 https://pqc-sandbox-landing.vercel.app
⭐ https://github.com/Deaksh/pqc-sandbox
📦 pip install pqc-sandbox
Working on a PQC migration? What's been your biggest blocker?
Top comments (0)