ExeQuantum is a post quantum cryptography company. We build the cryptography, not just the dashboard around it, from a formally verified post-quantum implementation to the control plane that governs it. That control plane, EQCore, helps organisations discover the cryptography they run, plan a prioritised migration and monitor their exposure, all inside their own boundary.
The move to post-quantum cryptography is one of the largest security migrations most organisations will ever run. We exist to make it manageable: to turn an open-ended problem into a measured inventory, a prioritised plan and a posture you can keep watching as standards and your estate change.
01
Sovereign by design
EQCore runs entirely on your own infrastructure - cloud, sovereign on-premise or fully air-gapped. It uses a data-residency-preserving architecture so your keys and data stay within your boundary.
02
NIST-aligned
Every finding carries a NIST control reference and our remediation guidance is built around the NIST-standardised post-quantum algorithms: ML-KEM, ML-DSA and SLH-DSA.
03
Honest about maturity
We are precise about what ships today versus what is on the roadmap. For a sovereign security vendor, an accurate claim is worth more than an impressive one.
The problem we exist to solve
Harvest-now, decrypt-later is already happening
Adversaries can capture encrypted traffic and stored data today and decrypt it once a cryptographically relevant quantum computer arrives. For anything that must stay confidential for years, the risk window is already open, and the migration deadline is fixed by standards bodies, not by convenience.
Store now · Break later
Today's data, tomorrow's breach
RSA and elliptic-curve key exchange that looks safe now becomes readable the day a capable quantum computer is fielded. Data intercepted and archived today is a standing liability.
NIST · The deadline
2030 deprecate, 2035 disallow
NIST's transition guidance deprecates 112-bit-strength RSA and elliptic-curve cryptography by 2030 and disallows it after 2035, a hard backstop the rest of the move plans against.
The gap · Years, not months
Migration is a multi-year programme
Discovering, prioritising and re-keying cryptography across a large estate takes years. Starting from a measured inventory now is what keeps these deadlines reachable.
Why now
The NIST 2030 / 2035 schedule turns "eventually" into a dated programme of work. The organisations that finish on time are the ones that have already mapped what they run and built a prioritised plan.
Our approach
EQCore: one control plane, three stages
EQCore is the cryptographic control plane that carries you from an honest inventory, to a prioritised plan, to ongoing monitoring. The same sovereign deployment covers all three stages: discover, migrate and monitor.
Discover
CipherScout™
Discover cryptographic assets across your network, certificates, applications and data layer, then emit a Cryptographic Bill of Materials (CBOM) you can act on. Includes sovereignty-safe on-premise discovery.
Migrate
CipherForge™
The plan classifies each finding as a key-encapsulation or signature swap, and CipherForge performs the swap with its own formally verified implementation. ML-KEM, ML-DSA and SLH-DSA operations run in our own CipherForge PQC service.
Monitor
CipherWatch™
Raise severity-scored alerts on every scan and on your schedule, and compare scans over time to surface new or changed cryptographic exposure, routed to Slack, ServiceNow or your SIEM.
How it fits together
EQCore plans, maps and orchestrates the migration; our own CipherForge PQC service executes the algorithm operations. The on-premise bundle is verified at install with ML-DSA-65 and minisign, so you can prove the software you run is the software we signed.
Earned, not claimed
Recognised across industry, government and academia
Certifications, government recognitions, independent assessments and academic validation. Each entry is third-party, verifiable and current.
Certification
ISO/IEC 27001:2022
Independently audited information security management system. Zero non-conformances at last surveillance audit.
Govt recognition
AUKUS Authorised User
Confirmed member of the AUKUS Authorised User Community. Licence Free Environment permit issued for technology transfer across Australia, the UK and the US.
Assessment
CREST-accredited security assessment
Grade A (Excellent). Zero non-informational vulnerabilities found across the platform. Assessed by ValueMentor.