FALL 2026 DISCOVERY PROGRAM · ENROLMENT OPEN
Most operators cannot answer that question. The Discovery Program answers it in three months: every encrypted flow inventoried, ranked by consequence, and turned into a roadmap your board, your auditor and your regulator can read. On the equipment you already own.
Twenty minutes, no slides. A written, fixed scope quote before any work starts.
WHY NOW
Federal departments submit their prioritized critical services list under the Treasury Board's new cyber readiness direction; attack path diagrams and a complete Internet connection inventory follow. Section 7.3 carries it into supplier contracts.
Royal Assent June 16, 2026. Designated operators in energy, telecom, finance and transport will owe a cyber security program and incident reporting once the regulations land, and the regulations are being written now.
ITSM.40.001 sets the migration milestones for high priority federal systems and for everything else. Every supplier to government inherits the timeline through procurement.
Each of these starts with the same first step, a cryptographic inventory, and none of them can be answered from memory.
WHAT YOU WALK AWAY WITH
Complete encryption inventory across all network traffic, IT and OT: every cipher, protocol, key length and certificate in use, and which endpoints use them.
Findings ranked by consequence to the services the network carries, mapped to the Canadian and NIST frameworks that apply to you.
A board ready executive summary for leadership and audit committees.
A phased migration roadmap with estimated costs and timelines: the number that goes in next year's budget.
A findings workshop with your team at week six.
A remediation plan for the firewalls and VPNs you already run, with no rip and replace.
Every finding labelled customer supplied, discovered or our judgment.
HOW IT WORKS
Virtual probes at the network boundaries you choose, installed remotely, watching live traffic. Passive. No agents on endpoints. No production configuration changed. The probe sees which protocols and ciphers are negotiated and between which endpoints; it does not decrypt traffic and does not need your keys.
Findings are ranked by what a failure would do to the service the flow carries, not by generic severity. The weak tunnels to a compressor station, a treatment plant or a remote site rise to the top because the consequence is physical.
The roadmap is phased to fit a capital plan and a fiscal year. What you do after it is your call. Many clients move to quantum-safe key delivery into the firewalls they already operate; some stop at the inventory. Either way you can answer the question.
IS THIS FOR YOU
You are responsible for operational telemetry, trade secrets, health records or anything with a regulatory retention clock; you run a network that will still be in service in 2040; your endpoints are hard to reach physically or still depend on manual preshared keys; a regulator, an auditor or a board is going to ask for a cryptographic inventory and a dated plan; you are integrating an acquisition and do not know what encryption came with it; or you are building the 2027 budget and need a real number rather than a placeholder.
Energy and resourcesGovernment and defenceUtilities and waterTelecommunicationsFinance and credit unionsCommunities and smart infrastructure
WHY FABRIC
From Calgary, with decades of experience operating open access networks in Canada. The platform we operate is validated to FIPS 140-3. Key delivery is device agnostic, with a Fortinet Fabric-Ready validated integration and open interfaces to the firewalls most operators already run. Public demonstrations of the platform by other operators are recorded in the Library and labelled as theirs, not ours.
FALL ENROLMENT
The fall enrolment special is about how you pay, not what you get. Monthly instalments over the term instead of one invoice on activation, sized to clear a standard monthly authorization limit, so the program can start now rather than wait for next year's budget. Fabric does not publish list prices; you get a written, fixed scope quote before any work starts.
QUESTIONS BUYERS ASK
A monitoring point for each virtual probe, typically a SPAN or TAP feed at a network boundary, a technical contact for remote installation, and about two hours of your team's time for kickoff and the week six workshop.
It observes cryptographic metadata: protocols, cipher suites, key lengths, certificates and endpoints. It does not decrypt traffic and does not need your keys. Findings describe the cryptography protecting a flow, not the content of the flow.
Yes. Discovery is passive: configurations are read and traffic is observed, nothing is reconfigured and no agent runs on a controller. The scoping call sets exactly which segments are observed and how.
It gives you the thing both will ask for first: a dated inventory of the cryptography protecting the systems in scope and a plan against the milestones. Readiness is a program, not one deliverable; the report is built to be the foundation of yours.
You decide. Protect adds quantum-safe keys to the firewalls and VPNs you already run. Comply keeps the inventory current and the reporting honest. Neither is required to get value from the first step.
Twenty minutes, no slides. We ask about your sites, what is driving the interest now and what a useful outcome looks like, and we tell you plainly whether a Discovery Program fits or whether a smaller first step is right.