Post-Quantum Cryptography Platform
NIST-approved post-quantum algorithms
End-to-end encrypted file storage
Envelope encryption via AWS KMS
Enterprise AWS-native infrastructure
AWS Integration
Powered by AWS
Quantumize integrates 26 core AWS services across security, storage, compute, networking, observability, messaging and billing, with 9 additional services defined for optional AWS deployments. Counts reflect project implementation, not verified live-account usage.
26
Core Integrations
9
Deployment Options
7
Categories
Security & Identity
- AWS KMS
- AWS IAM
- AWS STS
- AWS Secrets Manager
- AWS WAF
- Amazon GuardDuty
- AWS Security Hub
- Amazon Inspector
- AWS CloudHSM · optional
- AWS Certificate Manager · optional
8 core
2 optional
Storage & Data
- Amazon S3
- Amazon DynamoDB
- Amazon EFS · optional
- Amazon DocumentDB · optional
- Amazon ElastiCache · optional
2 core
3 optional
Compute & Containers
- AWS Lambda
- Amazon ECR
- AWS CodeBuild
- Amazon EC2 · optional
- Amazon ECS · optional
3 core
2 optional
Networking & Delivery
- Amazon API Gateway
- Amazon CloudFront
- Amazon Route 53
- Amazon VPC
- Elastic Load Balancing · optional
- AWS Cloud Map · optional
4 core
2 optional
Observability & Compliance
- Amazon CloudWatch
- AWS CloudTrail
2 core
Messaging & Email
- Amazon SES
- Amazon SNS
- Amazon SQS
- Amazon EventBridge
4 core
Operations & Billing
- AWS Cost Explorer
- AWS Marketplace
- AWS Resource Groups Tagging API
3 core
Frequently Asked Questions
Everything you need to know about post-quantum cryptography and Quantumize.
Post-quantum cryptography (PQC) refers to cryptographic algorithms that remain secure against attacks by quantum computers. Current widely-used algorithms (RSA, ECC) will be broken by sufficiently powerful quantum computers via Shor's algorithm. NIST standardized three post-quantum algorithms in 2024: ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205). Quantumize implements all NIST-standardized PQC algorithms plus Round 4 candidates (HQC, Classic McEliece).
NIST finalized three post-quantum cryptography standards in August 2024: FIPS 203 (ML-KEM, based on CRYSTALS-Kyber) for key encapsulation mechanisms, FIPS 204 (ML-DSA, based on CRYSTALS-Dilithium) for digital signatures, and FIPS 205 (SLH-DSA, based on SPHINCS+) for stateless hash-based digital signatures. These replace RSA and ECC in quantum-threatened environments. Quantumize supports all three standards with all parameter sets.
Quantumize supports all NIST-standardized algorithms: ML-KEM-512/768/1024 (FIPS 203), ML-DSA-44/65/87 (FIPS 204), and SLH-DSA (FIPS 205). NIST Round 4 candidates: HQC-128/192/256 and Classic McEliece. Legacy hybrid algorithms: CRYSTALS-Kyber, CRYSTALS-Dilithium, Falcon, and NTRU. GPU acceleration via NVIDIA cuPQC is available for high-throughput ML-KEM and ML-DSA workloads.
Quantumize uses AWS KMS for envelope encryption: each file is encrypted with a unique data key, and that data key is wrapped by an AWS KMS Customer Managed Key. The connection uses post-quantum TLS (X25519Kyber768Draft00 hybrid key exchange) via the AWS Common Runtime, protecting key material against harvest-now-decrypt-later attacks. AWS KMS provides FIPS 140-2 validated hardware security modules for key storage.
Yes. Quantumize integrates with NVIDIA cuPQC (CUDA Post-Quantum Cryptography) to accelerate ML-KEM and ML-DSA operations on NVIDIA GPUs, enabling high-throughput batch encryption and signing workloads — thousands of operations per second on A100 or H100 GPUs. GPU acceleration is available for enterprise on-premises deployments and AWS EC2 GPU instances. Quantumize is a member of the NVIDIA Inception program.
Quantumize uses FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) standardized algorithms. AWS KMS envelope encryption provides FIPS 140-2 validated key management. SOC 2 Type II audit is in progress, and FedRAMP ATO Low baseline is on the roadmap. Contact sales for a dedicated compliance review.
Quantumize supports a hybrid migration strategy: encrypt new files with post-quantum algorithms immediately while keeping existing RSA/ECC-encrypted files accessible. The admin console includes a migration wizard for re-encrypting existing files, algorithm lifecycle policies that flag files using weak algorithms, and a REST API and CLI for scripted bulk re-encryption.
Quantumize offers a free tier with core encryption and signing features. Enterprise plans include volume pricing, dedicated AWS KMS keys, SSO (SAML/OIDC), ABAC policy management, multi-cloud KMS (Azure Key Vault, GCP Cloud KMS), audit logs, and SLA guarantees. AWS Marketplace listing is in progress. Contact sales@quantumize.com for a custom quote.
Yes. Quantumize provides a Python SDK (PyPI), a Node.js SDK (@quantumize/sdk on npm), a CLI tool, and a REST API documented with OpenAPI 3.1 (available at /api/v1/docs). Enterprise integrations include SAML 2.0 and OIDC SSO with JIT provisioning, AWS Marketplace, and multi-cloud KMS for AWS, Azure, and GCP.
Quantumize implements multi-layer key management: per-file unique data keys (CSPRNG), org-level key encryption keys in AWS KMS with FIPS 140-2 HSMs, optional Customer Managed Keys in AWS KMS / Azure Key Vault / GCP Cloud KMS, ABAC policies controlling who can encrypt, decrypt, sign, or verify per file and algorithm, and comprehensive audit logs. Key material never leaves the HSM in plaintext.