Cyber resilience when cryptography breaks.

Crypto-agility, secure software updates, and authentication, built on information-theoretically secure cryptography that stays secure against quantum computers, AI, and future cryptanalysis.

Explore solutions → Contact us
// The Threat

Every computational cryptographic algorithm has a limited lifetime.

Today's standardised cryptography, such as RSA and ECDSA, is based on computational hardness: it is secure only while the problem behind it stays too hard to solve, a computational assumption, not a proof. A quantum computer breaks the asymmetric schemes among them, while AI and new cryptanalysis may break any computational scheme, computational MACs like HMAC and the post-quantum standards included. Every one of these algorithms has a limited lifetime.

For a remote, long-life system that cannot be recalled to be re-secured, a broken algorithm leaves the system exposed. It needs cyber resilience: to stay secure through the compromise and recover from it, with protection independent of the cryptography under attack that holds for the device's whole operational life, in normal operation and not only after a break.

// Our Approach

Information-theoretically secure cryptography for higher security and resilience.

QuBalt brings this cyber resilience to satellites, field assets, and secure hardware that stay in service for years and cannot be reached to be re-secured. At the foundation is an information-theoretically secure authentication, a higher level of security than the cryptography standardised today, holding against quantum computers, AI, and future cryptanalysis for a system's whole operational life. On it our solutions authenticate the software and data a deployed system acts on, so it recovers even if its own cryptography breaks, and stays secure at that level throughout normal operation. The approach is novel, and unique in the market: no other commercial solution brings information-theoretic security to remote, deployed systems this way.

Information-theoretic security

Proven by information theory, a higher level of security than the cryptography standardised today.

Hardware and software

One authentication core, delivered as an FPGA core or a pure C library, running on its own or alongside a system you already operate.

Designed for critical systems

Aerospace, defence, and critical infrastructure, where protection must hold for a system's entire operational life.

// Solutions

QURSUS and QUAUTS.

QuBalt's solutions are built on one information-theoretically secure authentication core, for long-life systems whose protection must hold for their full operational life. QURSUS secures and maintains a deployed system; QUAUTS proves that the messages and data it acts on are genuine.

QURSUS

A quantum- and cryptanalysis-secure remote software update system for inaccessible devices: it authenticates every software update package and the commands that drive it with information-theoretic security, manages the updates, and controls their installation on the device, so the device installs only what it can prove is genuine, after the deployed cryptography is broken and throughout the mission.

Crypto-Agility — Replace cryptographic algorithms on remote, inaccessible systems.

Extend a deployed system's operational life and keep it in service when its cryptography breaks, replacing a broken algorithm remotely rather than retiring the asset, and replacing algorithms on your own schedule before any break.

  • Cryptographic algorithms in FPGA or software replaced throughout the mission
  • Independent of the cryptography it updates
  • PQC migration and sovereign-policy ready
  • Threat response in days or weeks, not a hardware cycle
Explore solution →

Remote Software Updates — Deliver software updates to remote mission-critical systems.

Keep a mission-critical system secure and current for its whole life, so the device accepts only updates it can prove are genuine.

  • Firmware, subsystems, and payloads all updatable
  • Provable authenticity on every update
  • Update path hardened against malware injection
  • Patchable for the full operational life
Explore solution →
QUAUTS

A quantum- and cryptanalysis-secure authentication system for mission-critical data: an information-theoretically secure tag on every command, message, and record, with optional encryption, across your systems and your QKD links, after a cryptographic break and throughout the mission.

Authenticated Encryption — Authenticate commands and messages on mission-critical devices.

Let a system act only on data it can prove is genuine, tagging every mission-critical message with information-theoretically secure authentication, with one-time-pad or AES encryption when you need it.

  • A proven tag on every message or record
  • Telecommands, telemetry, records, inter-node traffic
  • Replaces computational MACs and signatures (HMAC, AES-GMAC, RSA, ECDSA, PQC)
  • Optional one-time-pad or AES encryption
Explore solution →

Authentication for QKD — Raise the QKD classical channel to its quantum security level.

Authenticate every classical-channel message with a tag keyed from the QKD output itself, so the classical channel is no longer the link's weak point.

  • Sits beside your existing classical channel
  • Replaces HMAC, AES-GMAC, and PQC signatures
  • Consumes only a small fraction of QKD output
  • Works across DV, CV, satellite, and QKD-as-a-service links
Explore solution →
// The Key Difference

Security proven by information theory, not assumed to be hard.

Computational security, the basis of RSA, ECDSA, and the post-quantum standards, rests on an unproven assumption: that its problem stays too hard to solve. Its proofs can be rigorous, but the assumption they rest on is not, so security holds only while that problem stays unsolved. Information-theoretic security is different in kind: proven by information theory, it holds against unlimited computing power, with no hardness assumption a future algorithm or quantum computer could falsify.

QuBalt builds on an information-theoretically secure authentication algorithm. With truly random, single-use keys and a correct implementation, the best attack any adversary has, at any computing power, is a blind guess with negligible odds. That is what "proven" means here: the odds are fixed by information theory. There is no underlying hard problem for a faster computer or better cryptanalysis to crack, so no amount of computing power can lower them, now or in the future.

// Application Areas

Where a cryptographic break must not end the mission.

Our solutions let operators re-secure and recover these systems if their cryptography ever breaks, and keep them secure in normal operation throughout. We bring this to the systems that must stay trustworthy for their entire mission:

In space

Satellites, constellations, CubeSats, probes and rovers, ground stations, and their payloads that operate for years and can never be recalled.

In the field

Ships, missiles, remote sensors, wind turbines, and critical infrastructure deployed far from maintenance.

In secure hardware

Cryptographic devices, communication modules, TPMs, HSMs, and QKD nodes that must stay mission-grade across a long fielded life.

// Proven Technology and Team

Proven technology and team.

ESA-validated

QURSUS and QUAUTS are validated to TRL 4 under the ESA GSTP programme.

In-orbit demonstration

Selected by ESA for in-orbit demonstration aboard its CyberCUBE satellite in 2026.

Proven team

Founders whose previous companies protected over five billion devices for Fortune 100 customers, including Google and Microsoft.

// Newsroom

News and events

07 Jul 2026

ESA successfully launched the CyberCUBE satellite into orbit. It will host QuBalt's in-orbit demonstration of its quantum- and cryptanalysis-secure remote software update system.

07 May 2026

Representatives of QuBalt attended the GSTP (Cyber)Security Workshop for Industry at ESTEC in Noordwijk, the Netherlands.

01 May 2026

Representatives of QuBalt will attend the ESA Industry Space Days 2026 at ESTEC in Noordwijk, the Netherlands, from 16 to 17 September 2026. If you want to meet us there, please contact us.

12 Nov 2025

QuBalt has been granted an EU patent for an optimisation of an information-theoretically secure authentication method invented by Wulf Harder.

All news and events →
// Get in Touch

Discuss your mission requirements

Whether you are protecting a satellite mission, a fielded critical-infrastructure asset, or secure hardware, our team will help you match the right solution to your systems, threat model, and compliance requirements. Explore our solutions to see how each applies, or contact our team to discuss yours.

Explore our solutions Contact us →