Hardware Security
AQtive Guard
Discovers cryptographic assets enterprise-wide and orchestrates post-quantum migration.
AQtive Guard Overview
What it does
AQtive Guard is a Cryptographic Posture Management (CPM) platform that gives security teams a single control plane to discover, assess, and remediate cryptographic risk ahead of post-quantum cryptography (PQC) compliance deadlines. Its distinguishing mechanism is correlation across code, runtime, and network surfaces: instead of managing only the certificates a legacy Public Key Infrastructure (PKI) tool already tracks, it surfaces hidden algorithms, shadow keys, and unmanaged certificates by combining static analysis with live runtime tracing.
How it works
The platform deploys purpose-built sensors across six surfaces, binaries, cloud, code, filesystems, network traffic, and endpoints, feeding a single correlation engine that maps every key, certificate, and algorithm to its owners, dependencies, and blast radius. It scores business risk, simulates the impact of a cryptographic change before it is applied, and then orchestrates key rotation, algorithm replacement, and PQC migration behind runtime guardrails that block deprecated ciphers such as MD5 and SHA-1. Each action generates Cryptography Bills of Materials (CBOMs) and audit evidence mapped to NIST PQC standards and CNSA 2.0.
Credentials and traction
AQtive Guard holds a SOC 2 Type I report and is covered by SandboxAQ's ISO/IEC 27001 certification, and it reached FedRAMP Ready status in December 2025 with a listing on the FedRAMP Marketplace. It has been deployed by enterprises including SoftBank Corporation, and Vodafone Business and Mount Sinai Health System are among SandboxAQ's named customers. In December 2025 SandboxAQ signed a five-year agreement with the U.S. Department of War CIO to run automated cryptographic discovery and post-quantum migration across Department systems, extending adoption among U.S. federal and defense agencies.
Key Capabilities
mapped to solution categoriesDiscovers cryptographic asset usage across the organization (TLS certificates, SSH keys, code signing keys, encrypted data stores) identifying what requires migration to PQC.
Implements CRYSTALS-Kyber (ML-KEM, FIPS 203), for key encapsulation and CRYSTALS-Dilithium (ML-DSA, FIPS 204), for digital signatures, the NIST-standardized post-quantum algorithms.
Lets an organization swap cryptographic algorithms without re-architecting applications, so quantum-vulnerable algorithms can be replaced as standards evolve.
Provides tooling to migrate TLS connections and certificate issuance to PQC algorithms, including testing compatibility with existing PKI and endpoint software stacks.
Integrations
compatible toolsImplementation & support
Info last updated on June 26, 2026
Vendors
Is this your product?
Claim your profile to connect with the teams looking for your solutions.