Blue Mesh Quantum Safe Talk to us

Solutions · Quantropi

Quantum safe encryption, ready to deploy.

Blue Mesh partners with Quantropi to bring software-based quantum safe security to your networks, legacy systems and connected devices. It runs on the infrastructure you already have: no new fibre, no photonic hardware and no rip and replace.

  1. 01Digital QKDQuantum safer keys for your firewalls and VPNs
  2. 02Proxy-QAn immediate quantum safe upgrade for at-risk TLS
  3. 03QiSpace for IoTQuantum safe security for connected devices
  • NATO DIANAProven across the Atlantic

    On 3 June 2025, Quantropi’s QiSpace technology ran the first transatlantic quantum safe link between two NATO DIANA accelerator sites, COVE in Halifax and the BioInnovation Institute in Copenhagen, with no specialised quantum hardware at either end.

  • Deutsche TelekomTested at scale

    Digital QKD was benchmarked in the Deutsche Telekom Open QKD Lab, with practically unlimited key rates at scale.

  • Open standardsSupported by the main vendors

    ETSI GS QKD 014 is a public, open interface, supported by the firewall and network vendors you already buy from.

Works with
  • Palo Alto Networks
  • Cisco
  • Fortinet
  • Juniper Networks
  • Nokia

Sources: Quantropi, “NATO DIANA’s Transatlantic Quantum-Secure Communications” (July 2025); Quantropi, Quantum Secure Key Distribution product information (2026). Vendor names are trademarks of their respective owners and are shown to indicate support for the open ETSI GS QKD 014 interface.

Digital QKD (D-QKD) · Firewalls, VPNs and data centres

Quantum safer with Quantropi.
Keys that never cross the wire.

“Harvest now, decrypt later” (HNDL) attacks copy encrypted traffic today, to decrypt it once a capable quantum computer arrives. Post-quantum algorithms make your encryption quantum safe. D-QKD makes it quantum safer, by taking the key agreement off the wire altogether. Your firewalls take their keys from the Quantropi key service, out of band, through the ETSI GS QKD 014 interface the main vendors already support.

Keys agreed on the wire

Quantum safe

  • Post-quantum algorithms protect the handshake
  • Keys are still negotiated in band, over the same link as your data
  • The key exchange can be captured, stored and attacked later if an algorithm is ever broken

Keys agreed out of band

Quantum safer, with D-QKD

  • Keys delivered out of band, through the ETSI GS QKD 014 interface
  • No key negotiation on the wire: nothing to capture or harvest
  • Quantum random keys, rotated by policy and under your control

That is why defence networks keep key agreement off the data path.

How Digital QKD works The Quantropi key service sends quantum random keys out of band to the firewall at each site using the ETSI GS QKD 014 interface. The firewalls then encrypt traffic between the sites over any IP network, using IPsec or MACsec. The keys never travel on the data path. Quantropi key service Quantum random keys · SaaS, sovereign or on premises Keys out of band ETSI GS QKD 014 Keys out of band ETSI GS QKD 014 Site A firewall Data centre or head office Site B firewall Data centre, branch or cloud Encrypted data path · IPsec or MACsec Any IP network: fibre, metro, satellite or wireless No keys on the data path: captured traffic gives an attacker nothing to decrypt later.
Keys and traffic travel on separate channels. The firewall OS needs its ETSI QKD 014 update; nothing else changes.
  1. Quantropi key serviceQuantum random keys, as SaaS, sovereign or on premises.
  2. Keys out of bandDelivered to the firewall at each site through ETSI GS QKD 014.
  3. Encrypted data pathFirewalls encrypt traffic between sites with IPsec or MACsec, over any IP network.
  4. Nothing to harvestNo keys travel on the data path, so captured traffic gives an attacker nothing to decrypt later.
  • No new fibre or hardware

    Software only. Unlike photonic QKD, there are no dedicated fibre links and no distance limits.

  • Works with the firewalls you run

    Built on the ETSI GS QKD 014 standard, supported by Palo Alto Networks, Cisco, Fortinet, Juniper and Ciena, and now in a new collaboration with Nokia.

  • Practically unlimited key rates

    Key delivery that keeps up at scale, benchmarked in Deutsche Telekom’s Open QKD Lab, with policy-driven key rotation across mixed estates.

  • Your keys, your control

    Quantum random key material from multiple sources, owned and controlled by you.

  • Deploy your way

    SaaS, Docker or Kubernetes, sovereign, or fully air-gapped, in a high-availability architecture.

  • Defence grade

    Out-of-band key agreement, the approach defence networks use, built on Quantropi’s QiSpace platform and patented Quantum Permutation Pad technology.

Ready to deploy on the firewalls you already run.

A firewall OS update and the Quantropi key service. Nothing else changes.

Proxy-Q · Legacy and mainframe systems

Make legacy systems quantum safe, without changing them.

Proxy-Q is a cryptography bridge. It gives an immediate quantum safe upgrade to any TLS connection still using at-risk encryption, such as RSA and ECC, without the costly exercise of upgrading stable systems’ operating systems and network connections. Protect them now, and plan the long-term migration in your own time.

How Proxy-Q works Legacy systems such as IBM Z, IBM i, AIX, MQ, Db2 and CICS send classical TLS to the Proxy-Q bridge. Proxy-Q, fed with strong random entropy from QiSpace, sends post-quantum hardened TLS onwards to cloud services, partners and modern applications. Legacy systems IBM Z · IBM i · AIX MQ · Db2 · CICS RSA / ECC: exposed to HNDL Classical TLS Proxy-Q Quantum safe cryptography bridge QiSpace: strong QRNG entropy PQC-hardened TLS Cloud · partners modern apps Quantum safe perimeter
No changes to the operating systems, applications, middleware or network connections on the legacy side. HNDL: “harvest now, decrypt later”.
  1. Legacy systemsIBM Z, IBM i, AIX, MQ, Db2 and CICS send classical TLS, still using RSA or ECC.
  2. Proxy-Q bridgeUpgrades the connection, using strong QRNG entropy from QiSpace.
  3. Post-quantum hardened TLSCarried onwards to cloud services, partners and modern apps.
  • Protect now

    An immediate upgrade for at-risk TLS, cutting your “harvest now, decrypt later” exposure today.

  • Zero-touch

    No changes to operating systems, applications or middleware.

  • One point of control

    Policy, keys, logging and audit in one place, for a smaller audit scope.

  • Extend asset life

    Avoid disruptive, CAPEX-heavy upgrades and keep stable workloads running.

Modernise the cryptography, not the application.

Protect legacy systems now, and migrate in your own time.

QiSpace for IoT · Connected and embedded devices

Quantum safe security for connected devices.

Smart meters, medical devices and vehicles stay in service for years, often with limited processing power and battery. QiSpace for IoT is a software development kit that adds quantum safe cryptography to embedded devices, without compromising performance.

On the device

Protected boot

A post-quantum bootloader validates firmware and every update before it runs.

In transit

Protected backhaul

Quantum safe MQTT and TLS carry device messages from sensor to server.

At the server

Protected data

Applications and data stay protected in transit and at rest.

Quantum grade keysStrong quantum random keys from QiSpace, at every stage, sized for constrained devices.

  • Built for constrained devices

    Optimised for limited memory, compute and battery, with real-time protection.

  • Crypto-agile

    Supports NIST post-quantum standards and Quantropi’s lightweight algorithms, including hybrid modes.

  • Major chip platforms

    STMicroelectronics, Renesas and Microchip, with Zephyr, FreeRTOS and embedded Linux.

  • Smart meters
  • Medical devices
  • Automotive
  • Industrial and OT
  • Firmware updates

See quantum safe MQTT running on your devices.

We can demonstrate it on your hardware, as part of a proof of concept.

Proof of concept

Prove it in your lab before you roll it out.

Test any of the three solutions with your own engineering team, on your own equipment.

  1. Step 1

    Scope the test

    We agree the use case, the equipment and what success looks like.

  2. Step 2

    30-day lab

    Software, training, engineering architecture and full support for your team.

  3. Step 3

    Decide and deploy

    Move to licence and roll-out, directly or through your MSP.

Ready to test it? Book your 30-day lab.

Tell us your use case and we will scope the test with you.

Resellers and MSPs: Quantropi solutions are channel ready, with strong margins and full vendor support. Partner with us →

Not sure where your at-risk encryption is? Start with <CODE>.

<CODE> finds and ranks the cryptography across your estate, so you deploy Quantropi where it matters first.

Contact us

Let’s talk about your quantum safe journey.

Contact us for any conversation about quantum safe consultancy, Quantropi’s solutions, or a proof of concept or pilot you wish to develop as a business.