Hardware Security
AQtive Guard
Discovers keys, certificates, and cryptographic algorithms across enterprise infrastructure, then orchestrates risk remediation and post-quantum cryptography migration.
AQtive Guard Overview
AQtive Guard is a Cryptographic Posture Management (CPM) platform that gives security teams a single control plane to discover, assess, and remediate cryptographic risk ahead of post-quantum cryptography (PQC) compliance deadlines. Its distinguishing mechanism is correlation across code, runtime, and network surfaces: instead of managing only the certificates a legacy Public Key Infrastructure (PKI) tool already tracks, it surfaces hidden algorithms, shadow keys, and unmanaged certificates by combining static analysis with live runtime tracing.
The platform deploys purpose-built sensors across six surfaces, binaries, cloud, code, filesystems, network traffic, and endpoints, feeding a single correlation engine that maps every key, certificate, and algorithm to its owners, dependencies, and blast radius. It scores business risk, simulates the impact of a cryptographic change before it is applied, and then orchestrates key rotation, algorithm replacement, and PQC migration behind runtime guardrails that block deprecated ciphers such as MD5 and SHA-1. Each action generates Cryptography Bills of Materials (CBOMs) and audit evidence mapped to NIST PQC standards and CNSA 2.0.
AQtive Guard is built by cryptographers who contributed to the NIST post-quantum standards, including FIPS 205, and is developed within SandboxAQ, the AI and quantum technology company that emerged from Alphabet in 2022. It targets enterprises and government agencies facing federal mandates such as CNSA 2.0, with a partner ecosystem that includes technology alliances with Palo Alto Networks, Qualys, and ServiceNow alongside global integrators including Accenture and Deloitte.
Key Capabilities
mapped to solution categoriesDiscovers cryptographic asset usage across the organization (TLS certificates, SSH keys, code signing keys, encrypted data stores) identifying what requires migration to PQC.
Implements CRYSTALS-Kyber (ML-KEM, FIPS 203), for key encapsulation and CRYSTALS-Dilithium (ML-DSA, FIPS 204), for digital signatures, the NIST-standardized post-quantum algorithms.
Lets an organization swap cryptographic algorithms without re-architecting applications, so quantum-vulnerable algorithms can be replaced as standards evolve.
Provides tooling to migrate TLS connections and certificate issuance to PQC algorithms, including testing compatibility with existing PKI and endpoint software stacks.
Integrations
compatible toolsImplementation & support
Info last updated on June 26, 2026