Pipeline for analyzing company domains for Post-Quantum Cryptography (PQC) support
Quantum Beacon is a full-stack monorepo that scans company domains to assess their readiness for Post-Quantum Cryptography. It discovers subdomains, performs TLS handshakes, and tests for PQC key encapsulation mechanisms (KEMs) across entire corporate domain portfolios.
The backend is a FastAPI service implementing the repository pattern with PostgreSQL for time-series scan tracking. A pipeline orchestrates subdomain discovery (via subfinder, assetfinder, and amass), followed by parallel TLS and PQC scanning with per-scan-run result storage. The React frontend visualizes scan results and is hosted on Firebase Hosting, with API traffic proxied to Cloud Run.
Infrastructure is fully managed by Terraform on GCP, with GitHub Actions handling automated deployment: backend Docker images are pushed to Artifact Registry and deployed to Cloud Run, the frontend is built and deployed to Firebase Hosting, and Terraform applies infrastructure changes on merge to main. Firebase App Check with reCAPTCHA v3 and slowapi rate limiting secure the API.
Tech: Python, FastAPI, React, TypeScript, PostgreSQL, GCP, Cloud Run, Firebase, Terraform, Docker, GitHub Actions
Features
- Automated subdomain discovery using subfinder, assetfinder, and amass
- TLS and PQC scanning pipeline with time-series scan run tracking
- Repository pattern with PostgreSQL for historical scan result storage
- React frontend on Firebase Hosting with Cloud Run API backend
- Full GCP infrastructure managed by Terraform (VPC, Cloud SQL, Cloud Run, Artifact Registry)
- GitHub Actions CI/CD with automatic deploy on push to main
- Firebase App Check (reCAPTCHA v3) and rate limiting for API security
Links: Website
More from the portfolio
This project is part of tvsguide.io, the personal portfolio of Tim Veil — software engineer and CIO at Two Bear Capital, previously at StarTree, Cockroach Labs, and Hortonworks. The full collection covers distributed systems, data infrastructure, JDBC drivers, AI services, build pipelines, real-time analytics, and a couple of personal apps. Each project ships with source code, tech notes, and links to live deployments where applicable.
Browse the project index, read about Tim's background, follow the blog, or return to the homepage. Source code lives on GitHub; professional history is on LinkedIn.