QuSecure helps organisations move their critical systems from classical cryptography to the NIST post-quantum algorithms, before quantum computers can break today’s encryption. Its software-only platform, QuProtect, finds the cryptography in use across a network, upgrades live traffic to post-quantum algorithms and produces the reporting that government mandates and auditors ask for.
QuSecure is a security company rather than a quantum computing company, and QuProtect needs neither quantum hardware nor a quantum computer. It is built for enterprises and government agencies that need cryptographic agility: the ability to change algorithms and certificates across a network without rewriting applications.
At A Glance
| Vendor | QuSecure, Inc. |
|---|---|
| Category | Post-quantum cryptography and cryptographic agility |
| Identities covered | TLS certificates, cryptographic keys and algorithms, workloads and services |
| Deployment | Software only and agentless; on-premises, air-gapped, cloud or hybrid |
| Certifications | CNSA 2.0 aligned, FIPS 140-3 mode of operation; IL6 authorisation sponsored and in progress |
| Customers | U.S. Army |
| Funding | Series A led by Two Bear Capital |
| Market classification | PKI & Certificate Lifecycle |
What QuSecure Does
The target algorithms are ML-KEM (FIPS 203) and ML-DSA (FIPS 204). QuProtect applies them at the network layer, so application source code and cryptographic libraries stay as they are. That matters for organisations with thousands of services that cannot all be rebuilt on a migration timetable.
The work follows a discover, protect and report sequence, managed from one orchestrator. Certificates are part of the same problem: with TLS certificate lifetimes “shortening to 47 days by 2029”, manual renewal stops being practical, so QuProtect provisions and rotates certificates automatically, including ML-DSA certificates.
Products
QuProtect
QuProtect is the platform that ties the modules together. Security teams use it to swap algorithms and push cryptographic policy changes across an entire network from a single console, without new hardware.
Recon
Recon answers the first question in any migration: what cryptography is actually in use. It builds an inventory of algorithms, protocols and certificates from sensors that passively observe live traffic, so discovery does not interrupt production systems.
Resilience
Resilience protects data in transit by moving live connections to ML-KEM and ML-DSA over PQ-TLS and PQ-mTLS. Where a peer can verify ML-DSA certificates it gets post-quantum protection; where it cannot, the connection falls back to classical TLS, so services keep talking during the transition.
Reporting
Reporting turns the inventory into evidence for compliance teams. It produces a CycloneDX cryptographic bill of materials (CBOM) mapped to mandates, with references to PCI DSS 4.0 and federal cryptographic inventory requirements.
How It Works
QuProtect runs on-premises, air-gapped, in the cloud or in hybrid environments without re-architecting the systems it protects. Its three components divide the work so that inventory, protection and reporting stay under one point of control even when sensors and encryptors are spread across sites.
| Component | What it does |
|---|---|
| Orchestrator | Administrators set cryptographic policy here, and the orchestrator distributes it to encryptors. Findings can also flow to select vulnerability scanners, SIEM and SOAR tools. |
| Sensors | Deployed separately from encryptors, sensors watch live traffic passively to feed the inventory. |
| Encryptors | Encryptors carry connections over post-quantum TLS, either as a sidecar beside a workload, forming a service mesh, or as a gateway serving multiple endpoints. |
Identities And Systems Covered
| Certificates | TLS certificates, including ML-DSA certificates, provisioned and rotated from one console. |
|---|---|
| Cryptographic algorithms | Classical P-256, RSA and X25519 alongside ML-KEM and ML-DSA, with SLH-DSA (FIPS 205) also covered in QuSecure’s glossary. |
| Workloads and services | Service-to-service connections over TLS 1.3, TCP, gRPC and HTTP, protected by sidecar or gateway encryptors. |
| Environments | Cloud, hybrid, on-premises and air-gapped systems, including satellite links, telecom networks and oil and gas SCADA. |
Company Background
| Founded | 2019. |
|---|---|
| Headquarters | San Mateo, California, United States. |
| Leadership | Rebecca Krauthamer (Chief Executive Officer and Co-Founder), Garrison Buss, PhD (Chief Technical Officer and Co-Founder), Austin Bosarge (Co-Founder, Chief Financial Officer) and Dave Krauthamer (Co-Founder and Field CTO). |
| Funding | Series A led by Two Bear Capital with participation from Accenture Ventures, bringing the Series A total to $28 million. |
| Government work | Delivered post-quantum cryptography and crypto agility for the U.S. Army at Project Convergence Capstone 6; the platform is in production with U.S. federal agencies. |
| Recognition | Included in the World Economic Forum’s 2026 Technology Pioneers; Inc. 5000. |
Note: This overview is compiled from QuSecure’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.