Qtonic Launches QShield for Post-Quantum Network Protection
Qtonic Quantum Corp has launched QShield, a software product designed to provide post-quantum protection for traffic between compatible Linux endpoints. The Miami-based company began offering paid, scoped engagements to enterprise and government clients on September 18, 2026, and has published a run log for buyers to review.
QShield’s Stated Capabilities
Qtonic states that QShield enables post-quantum encryption on sensitive connections purely through software, without requiring dedicated appliances at the endpoints. The company reports that the product utilizes ML-KEM-1024 for key establishment, ML-DSA-87 for endpoint authentication, and AES-256-GCM for packet encryption.
The first two are the highest parameter sets outlined in NIST’s standards, FIPS 203 and FIPS 204, and are the parameters specified by CNSA 2.0 for national security systems. According to Qtonic, private keys remain on the participating endpoints, and the system is designed to block protected traffic if security conditions cannot be met.
The company also reported a 72-hour endurance run across two AWS availability zones in Oregon, which yielded 4,107 successful checks, zero failed checks, and no recorded packet loss. Qtonic has released the run log, a build hash, and a verifier, allowing buyers to independently verify the results. This test was conducted by the company itself, not by an independent auditor.
However, Qtonic’s undisclosed information limits the conclusions buyers can draw. There is no pricing information, availability is simply stated as “now,” and no specific deployments or customers are mentioned. Support is only documented for compatible Linux endpoints. Furthermore, the provided materials do not include any FIPS 140-3 module validation or third-party security testing.
Limitations of a Product Launch
Though Qtonic uses NIST algorithms, this does not equate to passing NIST validation. Additionally, Qtonic’s endurance run measures uptime and integrity, not resistance to a quantum attacker. Since no cryptographically relevant quantum computer currently exists, QShield’s effectiveness against the threat it addresses has not yet been tested.
The underlying premise is “harvest-now-decrypt-later“, the concern that captured traffic could be decrypted once such a machine becomes available. This is a concern that other vendors, such as Sectigo, also address in their marketing.
Qtonic enters a competitive market. Q*Bird recently rebranded as Falqon Systems and focuses on MDI-QKD, an approach distinct from software PQC. Broader adoption tools are also emerging, including Fujitsu’s open-sourced quantum application package.
Read more