EU-Sovereign · Post-Quantum Transformation
ML-KEM keeps your data confidential. ML-DSA keeps it verifiable. Keys, tokens and signatures, quantum-safe by default — the sovereign alternative to Okta and 1Password.
The Problem
If any of these ring a bell, you are in the right place.
API keys, passwords, and tokens spread across .env files, Slack messages, and spreadsheets — one leak away from a breach.
100 users = €2,000+/month. Enterprise IAM tools price growing teams out of the market.
Schrems II, GDPR, and NIS2 require EU data residency. US-hosted services put you at regulatory risk.
RSA and ECC will be broken by quantum computers. NIST standardised replacements in 2024 — most stacks have not caught up.
Encryption-as-a-Service
A REST API that encrypts, signs, and verifies with NIST post-quantum algorithms. Drop into any backend, any language. Quantum entropy on the hot path. SDKs in TypeScript, Python, .NET, Rust.
Learn moreKey & Secret Management
A vault for keys, secrets, certificates, and rotation policies — encrypted at rest with the same PQC primitives that power the API. Every operation audited; every secret scoped to a tenant.
Learn moreIdentity Platform
OIDC and SAML federation with PQC-signed tokens. Bring Entra ID, Okta, Google Workspace — or roll your own. Authentication that survives the cryptographic transition.
Learn moreNo PhD required. A single API call replaces hundreds of lines of cryptography code.
Create a free account
Sign up and get 100,000 API calls per month. Free during the beta, no credit card required.
Generate an API key
Create a scoped API key from the portal with granular permissions per resource.
Make your first encryption call
POST your plaintext and receive ML-KEM-768 quantum-safe ciphertext in milliseconds.
curl https://api.quantumapi.eu/v1/encrypt \
-H "Authorization: Bearer YOUR_KEY" \
-H "Content-Type: application/json" \
-d '{
"algorithm": "ML-KEM-768",
"plaintext": "sensitive-data"
}'// Response
{ "ciphertext": "MIIBIjANBgkqhkiG9w...", "keyId": "k_7fG2" }A spec sheet, not a brochure.
Every algorithm we ship is a NIST-published standard, finalised in 2024. No experimental ciphers, no proprietary constructions. If it isn't in the FIPS catalog, it isn't in our stack.
The bits that seed every key come from a physical quantum process — not a deterministic PRNG. Generated by Quantum Blockchains in Wrocław, Poland; cached locally with a CSPRNG fallback.
Every byte stored, every key generated, every request handled — inside European jurisdiction. Hosted on EU infrastructure.
A small REST surface, predictable verbs, OpenAPI spec on launch day. CLI for ops, SDKs for the languages your team already writes. Infrastructure-as-code and CI integrations on the way.
Tenants, organisations, groups, users — four nested boundaries with explicit inheritance. No accidental cross-tenant leaks. Every secret carries the policy of the org that owns it.
Every operation — encrypt, decrypt, rotate, revoke — recorded in append-only audit logs. Designed to support your GDPR and NIS2 obligations.
All algorithms follow NIST FIPS 203, 204, and 205 standards.
+ AES-256-GCM for authenticated symmetric encryption (FIPS 197)
QuantumAPI is a personal project by a software engineer in Dublin, Ireland — the security infrastructure I wish had existed when I was building products myself.
Victor Zaragoza
Creator
Victor built QuantumAPI to solve problems he faced while building previous SaaS products: the cost and complexity of enterprise IAM tools, and the lack of accessible post-quantum cryptography for European companies.
100,000 API calls a month, free while in beta. No credit card. No per-seat fees. Quantum-safe from the first request.