DocsBlogComplianceGitHubSecurityEnterpriseInstall keylens

Keylens: Cryptographic Posture Management

Welcome to Keylens, the premier open source tool for cryptographic posture management. Keylens is a lightning-fast CLI tool that scans codebases to generate a Cryptographic Bill of Materials (CBOM). Designed to help organizations meet EO 14412 cryptographic inventory requirements, it acts as a proactive CNSA 2.0 compliance tool. Built in Rust with Tree-sitter AST parsing, Keylens is a powerful PQC readiness scanner ensuring your projects are prepared for the post-quantum era.

⚡ The “Aha!” Moment

See your cryptographic posture instantly, without walls of JSON. Generate actionable insights instantly with keylens scan --summary.

🚀 Value Proposition

  • Speed & DX: Written in Rust, Keylens offers a 50ms execution time with zero dependencies. Utilizing AST-based scanning, it provides accurate, compilation-free detection of cryptographic usage.
  • Actionable Security: Beyond just a CBOM generator, Keylens provides --fix-suggestions and performs SBOM↔CBOM dependency correlation, giving you context-rich security detections.
  • CI/CD Gating: Utilize our GitHub Action and the unique keylens diff feature for banned cryptography detection CI. Validate against Rego policy crypto compliance to block deprecated crypto before it merges.

💻 Quick Start

Get started in seconds. No complex setup required.

cargo install keylens
cd my-project
keylens init
keylens scan --summary

🛠 Core Workflows

Keylens integrates seamlessly into your developer and security workflows:

  • Generating a CBOM: Run keylens scan to instantly inventory cryptography across Python and JavaScript codebases, as well as dependency lockfiles.
  • Diffing for PRs: Use keylens diff --base main.json --head pr.json to detect newly introduced cryptography in a pull request.
  • Policy Checking against CNSA 2.0: Leverage keylens scan --strict to validate your cryptographic assets against modern standards and block critically insecure algorithms.
  • Viewing History: Use the interactive TUI with keylens view to explore findings and audit historical snapshots.

🔮 Future Scope & Commercial Boundary

Keylens open source is built for single-repo developer use—providing fast, local, and accurate CBOM generation.

Our roadmap includes expanding language support and refining our policy engine. For multi-repo aggregation, historical tracking, and enterprise-wide cryptographic posture management, this tool provides a natural bridge to Keylens Cloud.