Post-Quantum Cryptography Readiness Lags Despite CDN Adoption

• •54% of top websites support PQC, mainly due to CDN providers.
• •Only 27% of CISOs are implementing PQC actively within their organizations.
• •True quantum readiness requires upgrades beyond just front-end protections.

As of October 2026, over half (54%) of the top 1 million websites support post-quantum key exchange (PQC), primarily due to content delivery networks (CDNs) enabling this feature by default. However, only 27% of Chief Information Security Officers (CISOs) report actively implementing PQC within their organizations. The F5 Labs report indicates that true quantum readiness requires comprehensive upgrades across all technology layers, not just front-end protections. Experts warn that internal connections remain vulnerable to potential attacks, as many organizations have not upgraded their internal infrastructure. CISA and the G7 Cyber Security Working Group have called for a focus on integrating PQC into cybersecurity requirements and procurement processes. The report highlights that while edge adoption is a positive step, it does not equate to overall enterprise readiness. The need for organizations to engage with vendors about their quantum security plans is emphasized, as many third-party dependencies could complicate migration efforts.