Decryption Blast Radius rankings — who's most exposed to harvest-now-decrypt-later?
Public-surface Blast Radius scores for major US banks, healthcare systems, SaaS platforms, federal agencies, EU banks, airlines, and telecoms. Highest score = most public-surface exposure. Internal traffic (databases, east-west, VPN, backups) is typically 12-40× the public score; this leaderboard measures only what's externally observable.
Public surface only
These rankings measure exposure observable from the open internet — TLS handshake details, certificate transparency log history, cipher-suite tolerance, key reuse across renewals. Internal Blast Radius (east-west traffic, internal databases, VPN tunnels, backup pipelines) is typically 12-40× these public scores. A "good" public-surface grade does not mean low internal exposure.
Listed because you're a publicly-listed major institution in your sector. Want your domain removed from this leaderboard? Email remove@cipherwake.io with the domain and your role at the organization. Reviewed case-by-case.