QuSecure lands Gartner nod for crypto-agility tools

QuSecure has been recognised by Gartner as a Sample Vendor for crypto-agility solutions in three Gartner Hype Cycle reports covering zero-trust technology, application security and data security technologies.

The listings come as organisations face tighter deadlines for post-quantum cryptography migration and growing concern that encrypted data collected today could be broken by future quantum computers.

Crypto-agility is the ability to change cryptographic algorithms and related settings without replacing entire systems or redesigning applications. It has become more urgent as governments, regulators and standards bodies push organisations to prepare for a shift away from current encryption methods.

In one of the cited reports, Gartner said: "There is a 75% chance that nation-state actors will have a cryptographically relevant quantum computer around 2030, necessitating the move to PQC alternatives...Cryptography usage is growing and the systems using cryptography are becoming more dynamic, demanding more scalable, efficient and agile management practices to support them...Emerging regulations and other mandates are directly or indirectly requiring crypto-agility, such as PCI-DSS, DORA and CA/Browser Forum Ballot SC081."

The shift is part of a broader industry effort to adopt post-quantum cryptography, or PQC, based on algorithms designed to withstand attacks from quantum machines. Security teams are under pressure to identify where cryptography is used across networks, applications and devices, then plan updates without disrupting operations.

QuSecure develops software and management tools to help customers inventory cryptographic assets, apply policy controls and migrate to newer algorithms. Its QuProtect R3 platform is designed to let users make cryptographic changes across networks from a central control layer.

Rebecca Krauthamer, Chief Executive Officer and Co-Founder of QuSecure, linked the Gartner recognition to the company's work in the field and the timelines customers now face.

"Gartner's recognition of QuSecure in my view reflects the excellence and trust the team has built in the industry over the past seven years," said Rebecca Krauthamer, Chief Executive Officer and Co-Founder of QuSecure.

She added: "As timelines for quantum-safe adoption shrink to 2029 and 2030 for organizations across the world, the crypto-agility migration has become core to annual operating plans. Organisations need visibility into their cryptographic environments, policy-based control, and a practical path to migrate without redesigning applications or replacing hardware. QuProtect R3 was built for that operating reality, enabling quantum-resilient cryptography across enterprise IT, tactical networks, and mission-critical environments at a tenth of the time and cost of status quo migration methods."

Industry pressure

The issue has moved up the agenda as standards bodies including NIST in the United States advance post-quantum cryptography standards, while government security frameworks such as CNSA 2.0 set migration expectations. Financial services, critical infrastructure operators and defence organisations are among the sectors watching the transition most closely because of their long data-retention periods and exposure to state-backed threats.

Another Gartner passage cited by QuSecure highlighted the operational side of the challenge: "Cryptography algorithms and associated parameters require maintenance. This can include the periodic rotation of keys and certificates, migrations to safer alternatives as computing power improves and once-secure algorithms and key lengths become deprecated, and urgent change in response to compromise. The more crypto-agile your implementation and management of cryptography is, the more seamless and efficient this cryptographic maintenance becomes."

That focus on maintenance rather than one-off replacement helps explain why suppliers in this segment are pitching management and migration tools as much as new encryption methods. For many large organisations, the main obstacle is not choosing a post-quantum algorithm but understanding how deeply current cryptography is embedded in business applications, internal networks, industrial systems and partner connections.

QuSecure says its products are used in public and private sector environments, including defence networks and financial institutions. It also says its software is compatible with legacy infrastructure, a key issue for customers that cannot quickly retire older systems.

Inclusion in three Gartner Hype Cycle reports gives QuSecure visibility across several parts of the cybersecurity market as post-quantum planning moves into implementation.