Quantum Security

Ecosystem Map

An interactive guide for security, risk and compliance leaders

See which vendors support each layer of your cryptographic estate, at every stage of your post-quantum migration.

Columns are the five phases of post-quantum cryptography (PQC) migration. Rows are the eight layers of your cryptographic estate, from silicon to AI agents. Hybrid means classical and post-quantum algorithms used together during the transition.

Filter by delivery model
Migration phase →Estate layer ↓
01Discover8 vendors

Find every place your organization uses cryptography and record it in a cryptographic bill of materials (CBOM).

02Assess1 vendor

Rank systems by quantum risk, including data that could be stolen now and decrypted later, and plan the order of work.

03Protect27 vendors

Reduce exposure with interim controls while vulnerable cryptography is still in place.

04Migrate26 vendors

Replace vulnerable cryptography with post-quantum algorithms, from pilot to full rollout.

05Sustain3 vendors

Monitor your cryptography over time and keep it easy to update as standards change.

Silicon & firmwareChips, secure elements, TPMs, secure boot
OpenFirmware crypto inventory, chip-level CBOM
Device lifetime vs. quantum timeline exposure
OpenHybrid secure boot, crypto-agile bootloaders
PQC secure boot, PQC-capable secure elements, TPMs and IP cores
OpenPQC firmware-update signing, agility over device life
Devices, OT & IoTIndustrial systems, connected devices, drones, satellites
OT/IoT device crypto scanning
Long-lived and safety-critical asset prioritization
Hybrid/PQC gateways in front of legacy devices
Lightweight PQC libraries, device re-provisioning
OpenFleet key rotation, OTA update integrity
Networks & data in transitTLS, VPN, IPsec, SSH, optical links
TLS/SSH/VPN traffic and cipher-suite discovery
OpenHarvest-now-decrypt-later exposure of data in transit
Hybrid TLS, PQC VPN overlays, QKD links
PQC-enabled firewalls, load balancers, VPN concentrators
Protocol monitoring, config drift detection
PKI & certificatesCertificate authorities, certificates, lifecycle management
Certificate and CA discovery
OpenRoot/intermediate lifespan and trust-chain risk
OpenHybrid and composite certificates
PQC CA build-out, certificate re-issuance
Certificate lifecycle automation
Keys, HSMs & randomnessHSMs, key management systems, quantum random number generators (QRNG)
OpenKey inventory, HSM estate mapping
Key lifetime vs. data sensitivity mapping
QRNG entropy, hybrid key exchange and wrapping
PQC-capable HSMs and KMS upgrades
Key rotation policy, entropy health monitoring
Stored dataDatabases, backups, archives, tokenization
OpenEncrypted data discovery and classification
OpenData shelf-life and sensitivity analysis
OpenEncryption gateways, AES-256 uplift
OpenPQC key wrapping, archive re-encryption
OpenRe-encryption scheduling, retention alignment
Applications & codeSoftware, libraries, SDKs, dependencies
Source and binary crypto scanning, dependency analysis
App criticality and refactor-effort scoring
OpenCrypto abstraction and agility layers
PQC libraries and SDKs, code remediation, testing
Crypto policy checks in CI/CD
AI systems & agentsAgent identities, AI workloads, models
OpenAgent credential and API key inventory
OpenAgent trust and model provenance exposure
Hybrid signing of agent actions and model artifacts
OpenPQC agent identity, signed model weights
Runtime agent credential governance
Across all phasesAdvisory, integration and channel partners that span the whole migration

Advisory & assurance

Systems integrators

Channel & distribution

Placements are provisional, drafted by Horizen Labs from public information. Each vendor confirms or corrects its phase and estate-layer placement through the intake form. Listing is free and independent of any joint content. Featured status reflects the depth of your contribution to the map. It is not a Horizen Labs endorsement, certification, or technical assessment of your product.

Are you a quantum security vendor?

Listing is free. Tell us where your offering fits and we will place you on the map.

List your company