Skip to main content
QuantumAPI
Videos

Product videos

Short walkthroughs of QuantumAPI with real commands and the portal. Watch them here or download the full-quality file.

Videos that have no version in your language are narrated in English.

All videos

Travel mode: the vault you can carry

Duration: 1:47English

Marta Ferrer is flying to a conference, and Lumen Pay's vault holds the keys to production. She marks the four secrets the trip needs as travel-safe and turns Travel Mode on: the confirmation says five secrets will be hidden and four stay visible. The vault then lists only the four. The production secrets are not greyed out or locked, they are simply not there: search finds nothing, and the command line and the API answer "not found" for a production secret exactly as for a name that never existed. Only a signed-in owner or admin can switch it, never an API key. Back home she turns it off and all nine secrets return, and the audit log has the whole trip: the secrets she marked, and when Travel Mode went on and off, and who did it.

Download in high quality (1080p) · 11 MB

Secrets with history

Duration: 2:08English

A wrong value lands in a secret and Lumen Pay's Stripe webhook check starts failing. In QuantumVault the secret keeps every version, with when it was written and by whom, so the last good one is restored in one click: it returns as a new version, nothing is overwritten, and the check passes again. A contractor then needs a database password once: a share link that expires in an hour and opens a single time shows the value with no account, and the second open shows nothing. Audit Logs has a tab for secrets with the update, the restored version, the link created and the moment it was opened, without recording any value or link. History, restore and one-time links work from the portal and the qapi CLI.

Download in high quality (1080p) · 10 MB

Database passwords that expire on their own

Duration: 2:19English

Lumen Pay's reporting job needs to read the payments PostgreSQL database. Instead of one shared password that never changes, a dynamic secret engine in QuantumVault creates a new database user every time it is asked: an admin connection kept encrypted with the company's own key, a creation statement for a read-only user, a revocation statement that drops it, and a lifetime of five minutes. The job gets its credentials, psql logs in and reads the payments, then the lease is revoked and the same login fails, because the user no longer exists. The lease list and Audit Logs show both events. It runs from the portal today, for PostgreSQL and MySQL.

Download in high quality (1080p) · 11 MB

From Bitwarden to QuantumVault in two minutes

Duration: 2:14English

Lumen Pay's team exports its Bitwarden vault as a CSV and drops it on the import page. The format is recognised on its own, the eighteen logins land in the vault encrypted with the company's key, and even the two-factor seeds come across. Vault health then scores the import and names the weak passwords and the one shared by four accounts, Vault Intelligence shows the score by category and the risk patterns, and one password is rotated in place so the score goes up. QuantumVault is priced by API calls and storage, with unlimited users, keys and secrets.

Download in high quality (1080p) · 16 MB

Sign every release with a post-quantum signature

Duration: 2:01English

Lumen Pay's CI signs each release artifact with its own ML-DSA-65 key through QuantumAPI and stores the signature next to the file. The deploy script verifies the artifact before installing anything: valid, it installs. Then one byte of the artifact is changed, the verify answers invalid, the deploy refuses and the script exits with an error. The signing key never leaves the vault, and the sign and both verifications are in the key activity log.

Download in high quality (1080p) · 8 MB

Encrypt at rest with your own key, and erase it in one click

Duration: 2:32English

Lumen Pay encrypts its nightly database backup locally with a data key from its own QuantumAPI key, and restores it with a matching checksum. Then the key is revoked in the portal: the same restore is refused, so the backup and every copy of it can no longer be opened, without touching a file. That is crypto-shredding for GDPR erasure across backups, and every step is in the key activity log.

Download in high quality (1080p) · 14 MB

Product videos | QuantumAPI