NQX Quantum-Safe Encryption | Secure Data in Transit

NQX™ is a quantum-safe network encryptor that encrypts data in transit at Layer 2 (Ethernet) and Layer 3 (IP) at up to 100 Gbps line rate. NQX uses hybrid post-quantum key exchange combining classical algorithms with ML-KEM (NIST FIPS 203) and FrodoKEM, and is rated by the Finnish National Cyber Security Authority (NCSA-FI) for protecting classified data up to security level TL III (EU Confidential). NQX is deployed by defence, public organizations, data-center operators, satellite operators, and critical-infrastructure providers across Europe.

Quantum-safe, future-proof data security

Protect sensitive business data in transit with quantum-resilient encryption, longer key lengths, and crypto-agile algorithms designed to defend against today’s threats and tomorrow’s quantum attacks (harvest now, decrypt later) .

Holistic security, high-speed performance at scale

Encrypt at Layer 2/3 to protect everything above it automatically. Encrypt Ethernet and IP traffic at wire speed, from remote offices to large data centers, delivering up to 100 Gbps of low-latency protection without sacrificing throughput.

Flexible deployment, cost-efficient operations

Deploy seamlessly across networks with centralized administration, automated key lifecycle management, and pre-configured nodes that don’t require infrastructure changes, reduce complexity and overhead, accelerating time to value.

Adopt adaptable infrastructure with crypto agility

Rapidly adopt new cryptographic standards with support for classical, post-quantum, and hybrid encryption modes. NQX’s software-based architecture ensures algorithms stay current without requiring any hardware changes.

Get up and running quickly with fast, easy deployment

With pre-configured nodes and deployment wizards, NQX enables rapid installation across L2 and L3 networks. Both IT managers and technicians can easily deploy the solution, reducing reliance on specialized expertise.

Secure data in transit with built-in key management

NQX encrypts all traffic using quantum-resilient cryptography, ensuring data is protected from interception and tampering. With built-in key management, NQX automates key generation, rotation, and renewal, helping organizations maintain security and service availability.

Streamline administration with central management

Manage nodes, tunnels, configurations, and software lifecycles from a central interface. NQX enables organizations to strengthen their security posture with automated backups, predefined configurations, and lifecycle controls that reduce manual effort and operational risk.

Leverage proven technology certified by the NCSA

NQX is certified by the National Cyber Security Authority, recognizing its robust cryptographic design and implementation. This certification demonstrates the solution’s ability to protect highly sensitive and classified data in transit.

Maintain regulatory compliance to protect against risk

NQX’s network-level encryption supports organizations in meeting regulatory requirements for protecting data in transit, including GDPR, HIPAA, and PCI-DSS. By securing communications end-to-end, NQX reduces exposure to breaches, helping organizations avoid penalties and reputational damage.

OT sites, ground stations and remote sites

NQX 120 with 1 Gbps performance.

Learn more in NQX data sheet

Read the NQX data sheet for more detailed specifications.

Get NQX data sheet.

“With the NQX solution, we are able to offer our managed private cloud customers more advanced solutions to protect their connections and more importantly data. We can securely embed customer data inside a quantum-safe tunnel, ensuring high bandwidth for protecting critical transmissions against cyber threats.”

Kim Gunnelius, Managing Director and Head of Finland, Verne

Certified for confidential data

NQX has achieved security rating TL III (EU Confidential) for the transport of sensitive dat by National Cyber Security Centre Finland (NCSC-FI) at the Finnish Transport and Communications Agency Traficom.

Part of developing standards

SSH Communications Security is part of the US National Institute of Standards and Technology (NIST) Post-Quantum Cryptography Building Block Consortium, operated by the National Cybersecurity Center of Excellence (NCCoE). This collaboration hub works with industry, government, and academia to address cybersecurity challenges to pave the way for quantum-safe solutions in the United States and beyond.

Beyond the Limits of Post-Quantum Cryptography

Beyond the Limits of Post-Quantum Cryptography (BLimPQC) aims to solve cybersecurity challenges posed by quantum computers to ensure quantum-safe Finland. It brings together members of the industry, academic research organisations and key stakeholders from the government to ensure extensive research efforts.

Upcoming EU-R/NATO-R Certifications

NQX is in the process of acquiring NATO-Restricted and EU-Restricted Certifications for NQX

What is NQX?

NQX™ is a quantum-safe network encryptor from SSH Communications Security that encrypts data in transit at Layer 2 (Ethernet) and Layer 3 (IP) at up to 100 Gbps line rate. NQX uses hybrid post-quantum key exchange combining classical algorithms with ML-KEM (NIST FIPS 203) and FrodoKEM, and is rated by the Finnish National Cyber Security Authority (NCSA-FI) for protecting classified data up to security level TL III (EU Confidential). NQX is deployed by defence organizations, data-center operators, satellite operators, and critical-infrastructure providers across Europe.

Which post-quantum algorithms does NQX support?

Is NQX certified for classified data?

What throughput does NQX support?

Does NQX operate at Layer 2 or Layer 3?

How is NQX different from VPNs?

Who uses NQX?

Why start now if quantum computers aren't here yet?