Vendor-independent key management platform for hybrid quantum-safe networks.
Encrypted Today.
Secure Tomorrow.
Build encrypted communication today that stays secure against tomorrow's threats, on infrastructure you run and control yourself. Adopt crypto-agility procedures to layer security based on your demands or external factors like changes in regulations or newly found vulnerabilities.
KMS-001
KMS-002
Quantum computing and AI is advancing faster than most security roadmaps planned for. Organisations protecting sensitive data with a long confidentiality horizon face a concrete timeline problem: the encryption in use today may not hold when it matters most.
The migration to post-quantum cryptography has already begun in critical sectors. The question is no longer whether to migrate, but whether your migration allows for future-proof security or leaves you with an inflexible architecture, forcing further costly migrations due to changes in regulations.
That is the purpose of crypto-agility: the ability to swap, combine and upgrade cryptographic methods without replacing your whole platform. Start with post-quantum cryptography (PQC) as your first migration step and extend to Quantum Key Distribution (QKD) when your infrastructure is ready. Both are managed in a single pipeline, each independently upgradeable, so long-term security is preserved regardless of which mechanisms hold and which do not.
Our all-in-one platform for hybrid quantum-safe networks provides Key Management, Provisioning, Observability and Traceability, enabling customers to build such networks for their own infrastructure demands or to provide key delivery as a service to others.
Why this matters now.
Store now, decrypt later
Encrypted traffic captured today can be decrypted once a sufficiently powerful quantum computer or newly found vulnerabilities exist.
For data with a long protection horizon, this is not a future risk. It is already present.
Do not bind to one method
No one can predict which method will withstand tomorrow's attacks. Architectures built around a single method require full re-migration when that method fails.
A crypto-agile platform lets you replace or combine methods without rebuilding the system.
The window to act is now
Governments and standards bodies across multiple jurisdictions have published migration requirements for critical systems and national security infrastructure.
The mandate is no longer conditional and the migration to a quantum-safe architecture needs to start now.
Two layers.
One agile architecture.
The answer to unpredictable new attacks is not a stronger algorithm. It is an architecture that lets you swap and combine methods at any time.
Physical security (QKD)
Quantum Key Distribution uses quantum mechanical properties to detect whether a key exchange has been intercepted. Any eavesdropping attempt disturbs the quantum channel in a measurable way; if disturbance exceeds the error threshold, the session is aborted and the key material discarded.
Security relies on the laws of physics rather than assumptions about computational difficulty, so it holds regardless of advances in classical or quantum computing.
Mathematical security (PQC)
Post-quantum cryptography replaces classical cryptography with algorithms built on mathematical problems that no known quantum algorithm can solve efficiently. Classical public-key cryptography relies on problems that sufficiently powerful quantum computers can break.
PQC is grounded in fundamentally different mathematical foundations that remain computationally hard even for quantum hardware. These algorithms are already deployable in software today, making PQC the practical first step in any quantum-safe migration.
... or combined as a Hybrid approach
QKD and PQC address different threat vectors. QKD provides physics-based security that does not depend on computational assumptions. PQC provides software-deployable protection that is resistant to known quantum algorithms.
Running both in a single key management platform means neither weakness is exposed: if an algorithm is broken, the physical layer holds; if QKD key generation is interrupted, PQC covers the gap. Managing both layers together is precisely what our platform is built for.
Built around your demands.
Adaptable
Start with post-quantum cryptography (PQC) and extend to QKD when your infrastructure is ready. Each layer is independently upgradeable, so you are never forced to replace the whole platform when standards shift.
Our modular architecture integrates with existing infrastructure and adapts to evolving security and regulatory requirements without disrupting operations.
Automated
Utilising software defined networking (SDN) principles, our solution ensures efficient and automated key exchange and routing throughout the network.
Built-in observability and analytics tools give continuous visibility into network performance, key usage and routing across all connected nodes.
Vendor Independent
Through standardised interfaces, our solution works with a wide range of QKD modules on the market, preventing vendor lock-in.
The platform integrates with your existing infrastructure regardless of the QKD hardware you deploy, so you are free to choose QKD hardware vendor independently of your other systems.
Sovereign by Design
You operate the system yourself. It is software for self-operation, not a managed cloud service, so keys never leave your control.
Built in Europe and aligned with open standards. The code is source-available, so your team can audit, verify and trust exactly what runs in your infrastructure.
One Solution.
Multiple Purposes.
There are many different approaches to set up a secure communication infrastructure. We are building a solution that can be used in a variety of different contexts to solve a wide range of problems.
Built for organisations that can not afford to wait.
Infrastructure operators
Government, defence, critical infrastructure and large enterprises building or operating quantum-safe networks for their own communications and security requirements.
Service providers
Telecommunication and managed-security providers offering quantum-safe key exchange as a managed service. Our platform supplies the full operational layer, including policy, routing and billing integration.
Also referred to as Quantum Key-as-a-Service (QKaaS)
Direct end customers
Organisations protecting data with a long confidentiality horizon. Start with software today and add QKD hardware later, protecting your investment as your network grows.
Multi Hop – connect data centers or locations
Enhance your own network infrastructure with an additional physics-based security layer that holds against future advances in computing.
QKD technology adds a physics-based security layer that complements rather than replaces your existing cryptography. Security is preserved regardless of future advances in computing, because it relies on the laws of physics rather than computational hardness assumptions.
Connect locations using any available QKD module on the market. Our platform relays keys across intermediate trusted nodes, bypassing the physical distance limits of point-to-point QKD links, and distributes shared key material to all participating locations.
The distributed key material integrates with your existing encrypted communication channels: hardware encryptors, software VPN solutions, or any system that accepts externally supplied symmetric keys.
Location A
Data Center · Berlin
Location B
Data Center · Frankfurt
Encryptor
Encryptor
Trusted Node
Trusted
Nodes
Trusted Node
Trusted Node
KMS
QKD Module
Trusted Node
Hop 1
Trusted Node
Hop 2
Trusted Node
Hop 3
Trusted Node
KMS
QKD Module
Multi Tenant – provide keys as a service
Operate a shared QKD network and offer quantum-safe key exchange to multiple customers simultaneously, fully separated per tenant.
Your customers request key exchanges between any two endpoints in your network. Each request is handled automatically, with keys delivered only to the authorised endpoints on both sides.
The platform delivers identical key material to both endpoints simultaneously: the originating site and the destination. At both sites, your customers can use them as shared secret to encrypt their user data.
Connect the platform to your policy and billing systems to control access, enforce per-tenant permissions and track key requests for audit and usage accounting.
Customer A
Endpoint 1 · Paris
Customer B
Endpoint 1 · Berlin
Request ↓
Key A
Request ↓
Key B
QKDN Core Infrastructure
Dynamic Routing
Efficient & Adaptive
Key Forwarding
Secure & Reliable
Key Management
Storage & Lifecycle
Policy & Billing
Authorisation & Tracking
Monitoring
Health & Observability
Customer A
Endpoint 2 · Brussels
Customer B
Endpoint 2 · Munich
See what a sovereign, crypto-agile network looks like for you.
The most expensive decision is to wait. Share a few details about your infrastructure and we will put together the information that matters for your situation.
Where we come from.
qonduit is a deep-tech spin-off of Hochschule Darmstadt, turning research from real QKDN projects such as DemoQuanDT into a product. Our mission is to strengthen Europe's digital sovereignty through secure communication and technological independence.