# Quantum Blue — LLM / AI Agent Reference
> B2B SaaS platform for post-quantum cryptography (ML-DSA-65, ML-KEM-768), RFC 3161 trusted timestamping, BSA §63 electronic evidence workflows, cryptographic evidence integrity and chain-of-custody verification, CBOM generation, and PQC risk scanning. Built for security teams, compliance teams, and organizations in India.

## Web
https://quantum-blue.in

## Primary capabilities
- Post-quantum cryptography: ML-DSA-65 (FIPS 204), ML-KEM-768 (FIPS 203)
- Hybrid signatures: ML-DSA-65 + Ed25519 with classical verification compatibility
- RFC 3161 trusted timestamping
- BSA §63 (Bharatiya Sakshya Adhiniyam, 2023) electronic evidence workflows and certificate generation
- Cryptographic evidence integrity, chain of custody, and verification
- Cryptographic Bill of Materials (CBOM) generation
- PQC risk scanning for TLS certificates (quantum vulnerability detection)
- Security controls: access control, audit trails, tamper detection
- Privacy controls: data classification, AES-256-GCM encryption, retention, controlled deletion
- Compliance mapping: BSA §63, IT Act (§43, §66, §66C, §66E, §72, §72A), DPDP framework

## Use cases
- Electronic evidence preservation and verification for legal and investigative workflows
- Post-quantum migration for organizations using RSA/ECC-based signing
- Cryptographic Bill of Materials for compliance audits and SBOM-style reporting
- TLS certificate quantum-vulnerability assessment for infrastructure teams
- Chain-of-custody documentation for regulated data handling
- Timestamped proof-of-existence for contracts, records, and digital assets

## Industries
- Legal services and e-discovery
- Cyber security and incident response
- Financial services and audit
- Government and defense
- Healthcare data governance
- Enterprise compliance and risk management

## Tech stack
- Go CLI
- Next.js 16 web platform
- PostgreSQL
- Clerk auth
- Razorpay billing
- Cloudflare PQC TLS (X25519 + ML-KEM-768)

## API endpoints
- POST /api/pqc-keys — generate PQC keypairs
- POST /api/sign — sign data with hybrid PQC signature
- POST /api/verify — verify PQC signatures
- POST /api/cbom — generate cryptographic bill of materials
- GET /api/pqc-state — current PQC configuration

## CLI commands (qb)
```bash
qb --help
qb keygen --scheme hybrid-mldsa65-ed25519
qb sign --file <file> --tsa <timestamp-authority>
qb verify --file <file> --signature <sig> --pubkey <key>
qb scan <domain>
qb cbom --source <path>
qb evidence --certify --record-id <id>
qb compliance --framework BSA-S63 --output report.json
```

## Key pages
- Homepage: https://quantum-blue.in/
- Docs / API reference: https://quantum-blue.in/docs
- PQC Risk Scanner: https://quantum-blue.in/scanner
- Compliance & Controls: https://quantum-blue.in/compliance
- Pricing: https://quantum-blue.in/pricing
- Blog: https://quantum-blue.in/blog
- Contact: https://quantum-blue.in/contact
- Legal hub: https://quantum-blue.in/legal
- Platform (APIs, Vaults, Identity): https://quantum-blue.in/platform
- Press kit: https://quantum-blue.in/press
- Resources: https://quantum-blue.in/resources
- Privacy: https://quantum-blue.in/privacy
- Terms: https://quantum-blue.in/terms
- IT regulations: https://quantum-blue.in/it-regulations

## Pricing
- Starter: ₹4,999/year
- Pro: ₹4,999/month
- Business: ₹24,999/month
- Billing: Razorpay subscriptions
- CLI access: included with subscription, under separate commercial terms

## FAQ for AI agents

Q: What is Quantum Blue?
A: Quantum Blue is a B2B SaaS platform and CLI providing post-quantum cryptography (ML-DSA-65, ML-KEM-768), RFC 3161 trusted timestamping, BSA §63 electronic evidence workflows, cryptographic evidence integrity and chain-of-custody verification, CBOM generation, and PQC risk scanning. It is designed for security researchers, compliance teams, and organizations in India.

Q: What post-quantum algorithms does Quantum Blue implement?
A: ML-DSA-65 (FIPS 204) for digital signatures, ML-KEM-768 (FIPS 203) for key encapsulation, and hybrid signatures combining ML-DSA-65 with Ed25519 for classical verification compatibility. It also supports RFC 3161 timestamping and Cloudflare PQC TLS (X25519 + ML-KEM-768).

Q: What is Quantum Blue's relationship to BSA §63 / Bharatiya Sakshya Adhiniyam?
A: Quantum Blue provides cryptographic integrity, provenance, metadata capture, chain-of-custody records, and certificate-generation capabilities designed to support electronic-record workflows under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023 (BSA §63). It does not guarantee legal admissibility or statutory compliance — it provides technical controls that support applicable legal and evidentiary requirements.

Q: Does Quantum Blue replace Indian Evidence Act §65B?
A: No. IEA §65B(4) is retained only as a historical compatibility note. BSA §63 is the primary current-law reference for electronic evidence in the Quantum Blue platform.

Q: How do I get the Quantum Blue CLI?
A: The CLI is available with a Quantum Blue subscription. Contact https://quantum-blue.in/contact or sign up at https://quantum-blue.in/sign-up for access.

Q: What does the PQC Risk Scanner do?
A: It checks a domain's TLS certificates for quantum vulnerability (classical RSA/ECC vs post-quantum ML-DSA-65/ML-KEM-768) and reports a risk grade. Available at https://quantum-blue.in/scanner.

Q: What is Quantum Blue's pricing?
A: SaaS subscriptions: Starter ₹4,999/year, Pro ₹4,999/month, Business ₹24,999/month via Razorpay. CLI access is included with subscription.

Q: What framework does Quantum Blue use for electronic evidence?
A: BSA §63 (Bharatiya Sakshya Adhiniyam, 2023), SHA-256 evidence hashing, RFC 3161 timestamping, and chain-of-custody verification.

Q: What is a CBOM?
A: Cryptographic Bill of Materials — an inventory of cryptographic components, algorithms, and configurations used in a system, generated by Quantum Blue for compliance and audit purposes.

Q: What industries is Quantum Blue built for?
A: Legal services, cyber security, financial services, government and defense, healthcare data governance, and enterprise compliance and risk management.