# What should a small company do about post-quantum cryptography now?

Mostly cheap, ordinary things. First, keep browsers, operating systems, VPN clients, servers and libraries up to date: much of the post-quantum change arrives through updates, and modern browsers already use hybrid key exchange by default. Second, list where you use cryptography you control yourself: your website and its hosting, remote access, e-mail, file transfer with customers, and any appliance with its own certificates. Third, mark the data that must stay secret for many years. Fourth, add one question to every new purchase or contract renewal: does the product support hybrid post-quantum key exchange, and if not, when? Fifth, prefer suppliers that can change algorithms through updates. Buying special quantum products is not on the list. NetSenX can help with the second step: NQCI, in preview, is visible on every plan and active from the Pro plan, and needs the packet-capture sensor, off by default, switched on for a Linux agent or a SPAN/TAP sensor; the basic macOS mode does not see handshakes.

FAQ: [Post-quantum cryptography](https://netsenx.com/en/faq/pqc) · https://netsenx.com/en/faq/what-should-a-small-company-do-about-pqc-now

## Read next

- https://netsenx.com/en/encrypted-traffic-analysis
- https://netsenx.com/en/features
- https://netsenx.com/en/blog/2026-10-27_harvest-now-decrypt-later

## Related questions

- [How long does a post-quantum migration take?](https://netsenx.com/en/faq/how-long-does-a-post-quantum-migration-take)
- [What do we gain by migrating to post-quantum cryptography?](https://netsenx.com/en/faq/what-do-we-gain-by-migrating-to-post-quantum-cryptography)
- [What can go wrong in a post-quantum migration?](https://netsenx.com/en/faq/what-can-go-wrong-in-a-post-quantum-migration)
- [What is crypto-agility?](https://netsenx.com/en/faq/what-is-crypto-agility)
- [Do SSH and VPNs support post-quantum key exchange?](https://netsenx.com/en/faq/do-ssh-and-vpns-support-post-quantum-key-exchange)