Drag any PQ-Verified Artifact in.
Verify it without contacting H33.
One file. One verdict. Pillar status. Signature status. Evidence lineage. Every check runs in your browser. Nothing uploads anywhere.
PQ-Verified is the recognition that an artifact conforms to the post-quantum requirements. This page reads a PQ-Verified Artifact and recognizes whether it asserts conformance — matching its structure, hashes, and triple-family PQ signatures against the standard. It does not create the evidence and it does not stand in for an independent third-party verdict.
Why this exists: a conformance claim written on a page is not portable. This tool lets anyone — with no account, no upload, and no contact with H33 — recognize whether a given artifact actually asserts post-quantum conformance, so the claim can travel with the file instead of living on trust.
- PQ-Verified recognizes conformance; it does not render the independent verdict — that is Verification, where a third party re-checks the artifact offline, trusting no one.
- PQ-Verified recognizes conformance; it does not score software or controls maturity against a rubric — that is HICS.
- The evidence being recognized is produced by H33-74 (the portable 74-byte PQ evidence primitive); PQ-Verified does not produce it.
Use it to recognize whether an artifact you already hold asserts PQ conformance, offline, in seconds. Do not use it to obtain an independent verdict you can cite against your own risk decision (re-run the open-source verifier yourself — that is Verification), to grade an organization's security maturity (that is HICS), or to generate the underlying PQ evidence in the first place (that is H33-74).
—
Pillar Status
Structural Checks
Frequently asked
What does this page actually do?
It recognizes conformance. You drag in a PQ-Verified Artifact and the page checks its structure, recomputes its SHA3-384 hashes, and inspects the attestation records the artifact carries — recognizing whether the file asserts post-quantum conformance to the standard. It does not itself cryptographically validate the ML-DSA, SLH-DSA or FALCON signatures. Everything runs in your browser; nothing uploads anywhere.
Is recognizing conformance the same as an independent verdict?
No. PQ-Verified recognizes that an artifact conforms; it does not render the independent verdict. That is Verification — a third party re-checks the artifact offline, trusting no one. The open-source verifier CLI exists precisely so you can produce that independent verdict yourself.
Does this score my security maturity?
No. PQ-Verified recognizes conformance; it does not score software or controls maturity against a rubric — that is HICS. This page answers "does this artifact assert PQ conformance?" not "how mature is this organization?"
Where does the evidence in the artifact come from?
The portable evidence being recognized is produced by H33-74, the 74-byte post-quantum evidence primitive. PQ-Verified does not produce that evidence — it recognizes and asserts conformance over it. The standard's acceptance rule is a 3-of-3 PQ AND-gate — ML-DSA, FALCON/FN-DSA and SLH-DSA — where two of three is a false grant. This page reports the attestation status recorded in the artifact; it does not perform that signature validation itself.