Protection against AI attacks. Clarity on Shadow AI.

Uncover Shadow AI. Make your business more secure.

SaQura helps companies protect themselves against AI attacks: we show you which AI is at work in your business, and you decide what it can access.

An AI inventory for your whole company.

AI in your businessSample view
14
AI services found
5
of them not approved
3
with access to customer data
  • AI agent with mailbox accessRead, send, delete Full access
  • Translation serviceMarketing · approved Sep 12 Approved
AI security consulting

See where your company stands on AI security.

We advise you on AI security and shadow AI, with no product purchase needed. The first step: a clear overview of where your company stands today.

Request consultationPrice on request
  • A clear overview

    Which AI tools and AI agents are in use, including shadow AI, and which data they can reach.

  • Priorities you can act on

    We rank the risks and show the next steps, in plain terms for management and IT.

  • Safe AI use, step by step

    Approval routes, the right permissions for AI agents and guidance for your team, plus quantum-safe encryption as standard protection.

Latest from SaQura

LatestNew

In the AI era, real and fake look the same.

AI makes attacks faster and more frequent. We show you which AI is at work in your company and what it can access.

More on AI security

Playing loads YouTube. Privacy

LatestApp Store

The certificate check, in your pocket.

Grade A to F for any address, three addresses under watch.

iPhone screen: watch list with one address and a reminder before expiry
iPhone screen: check of example.com with grade B, days left, trust chain, protocol and revocation status

1 of 3: Clip: AI security

AI security

Which AI is at work in your company, what it can access and how you secure it.

What's happening now

AI is already in your business. The question is what it can access.

Shadow AI

Customer data in outside AI services

One short prompt in a chat assistant, and quotes, contracts or customer data end up with an outside service.

AI attacks

The email sounds just like your boss

Attackers use AI to write emails, voices and messages that feel genuine. Faster and more convincing than ever.

Excessive permissions

An AI agent with a master key

If an AI assistant has more permissions than its task needs, whoever takes it over can reach everything it is allowed to see.

The solution

How you stay in control.

Our products

Make AI visible. Encrypt your data.

Our products show which AI is running in your company and encrypt your data with quantum-safe methods.

SaQura Crypto Inventory

Know what's quantum-unsafe

An app that checks your source code and server addresses and shows, in plain language, which encryption you use and what quantum computers will break, with a report and roadmap.

For: Organisations that want to document and plan their encryption for NIS2, GDPR or the BSI recommendations.

Annual license · runs locally

€5,900/year

SaQura Library

Encryption inside your app

Add SaQura as a package: the encryption runs entirely on your own infrastructure, your data and keys stay with you.

For: Teams who build it into their own software.

Available for:

.NET Android Web Swift Python C/C++

SaQura Crypto API

Encryption as a service

Call a secure API. You write no encryption yourself and run no infrastructure.

For: Anyone who wants to start fast without building encryption themselves.

REST API

SaQura MCP-Server

Encryption in your AI assistant

Give your AI assistant (e.g. Claude) secure encryption, with no coding at all. Encryption and decryption run locally on your computer; your keys and data are not sent to us or to any third party in the process.

For: Anyone using AI assistants who wants encryption without code.

Runs locally · via NuGet (dnx)

SaQura Self-Hosting

On-premise & sovereign

Run SaQura entirely on your own infrastructure, with central management, policies and MDM rollout. The server never sees plaintext.

For: Public agencies, critical infrastructure and regulated industries.

On-premise · Managed

SaQura CertWatch

Certificates watched, expiry reported in time

The watchdog on your own server checks your domains daily, warns you well before anything expires and documents it in sealed reports.

For: IT operations and service providers who never want an outage from a forgotten certificate again.

Annual subscription · self-host · Windows/macOS/Linux · iPhone app

€1,290/year

SaQura Certificate Report

Every certificate under your domain, graded

Enter your domain, pay, done: the sealed report finds all certificates for your domain recorded in the public Certificate Transparency logs, checks each address live from the outside and grades it from A to F. No installation, no credentials.

For: Management and IT who want to know today what runs under their domain and when it expires.

One-time purchase · PDF by e-mail · EN/DE/JA

€29 one-time

SaQura CRA reporting process template

CRA reporting duty since 11 September: the process, ready to use

Since 11 September 2026, manufacturers of products with digital elements report actively exploited vulnerabilities under Article 14 CRA: early warning within 24 hours, notification within 72 hours. The template turns the reporting duty into a process: deadlines, decision tree, four report texts, case log. As DOCX and PDF, in English and German.

For: Manufacturers of software and devices with software who want to know on day one who reports what, when and where.

One-time purchase · DOCX + PDF by e-mail · EN/DE

€79 one-time

SaQura Tresor

Backup only you can open

Zero-knowledge, end-to-end encrypted backup: files are encrypted on your device before they ever leave it. The storage side never sees plaintext.

For: Law/tax firms, clinics and any business with confidential, retained documents.

GDPR/GoBD-oriented · cloud or self-hosted

SaQura Pass

Password manager without an account

Passwords and notes encrypted on your own Android phone, with quantum-safe protection. No account, no cloud.

For: Anyone who wants to keep their passwords in their own hands.

Android app on Google Play

Available on Google Play. Pro is a one-time purchase.

The family

SaQura, everywhere you encrypt

Server, app, web: the same encryption, identical on every platform.

Live
.NET

For .NET servers & desktop apps

Live
Android

For Android apps

Live
JS/TS

For web apps in the browser

Live
Swift

For iPhone & iPad apps

Live
Python

For services, scripts & data pipelines

Live
C/C++

For embedded, desktop & native code

Live
Crypto-API

Encryption as a hosted service

Live
MCP-Server

Try it from your AI assistant

On request
Messenger

Secure messaging app (E2EE)

Encrypt on one device, decrypt on any other.

One format, compatible across every platform and proven device to device. iPhone, Android, Windows, server and web share the exact same encryption. So a single solution covers your whole stack, instead of something different per platform.

Part of the SaQura family · Available on request

SaQura Messenger

The same quantum-safe encryption as the rest of SaQura, now for talking. No account, no phone number, no address book. Self-hostable and centrally managed.

SaQura Messenger

Check it yourself first

Enter a hostname, see the grade A to F with its reasons. Results in seconds.

Services

We do the work for you.

KyotoTech takes on the implementation, from the first review to a fully migrated system.

All services

Need an app, a website or a backend? KyotoTech builds those as well. Visit KyotoTech

Quantum-safe encryption

How to encrypt your data today against the computers of tomorrow.

Quantum computers change the rules.

And the clock is ticking: the BSI recommends an end date for relying on classical encryption alone.

BSI guidance: 2030/2031 cut-off

On 11 February 2026 the BSI recommended end dates for classical asymmetric encryption: RSA and ECC should be used on their own only until the end of 2030 for highly sensitive data, and until the end of 2031 in general. After that, only in combination with quantum-safe schemes. Public authorities and critical infrastructure are urged to migrate now.

Source: BSI TR-02102-1 (2026 edition) · BSI press release of 11 Feb 2026

For decision-makers
  • Sensitive data (case files, citizen records, communications) must stay protected today and in ten years.
  • “Capture now, decrypt later”: attackers collect data today in order to decrypt it with future computers.
  • Under NIS2 and GDPR, what counts is that your cryptography reflects the state of the art and is documented.
For developers
  • Finding and evaluating the right encryption library takes time.
  • Is my existing code even quantum-safe?
  • Add quantum-safety without putting your running project at risk.
Captured today, decrypted tomorrow. Stop it now

Encryption that stands up to quantum computers.

SaQura brings post-quantum cryptography to .NET, Android, iOS, Web, Python and C/C++: via a package, without rebuilding your existing project. The same encryption on every platform.

FIPS 203 / 204 / 205 algorithmsMethods recommended in BSI TR-02102-1 availableDocumentation for NIS2 & GDPRIdentical on every platform

Standards

Two profiles: the NIST standard or methods recommended by the BSI. One library. You choose.

The NIST standard, or a conservative profile with methods the BSI recommends in its Technical Guideline TR-02102-1: both are built in. One setting decides.

NIST standard · FIPS 203

ML-KEM for key exchange, NIST's post-quantum standard FIPS 203.

For: teams following the international standard.

Conservative profile · BSI TR-02102-1

FrodoKEM-976 and FrodoKEM-1344, as recommended in BSI TR-02102-1: conservative by design and thoroughly studied for years.

For: government, critical infrastructure, anything that must stay secret for decades.

In the NIST profile we combine ML-KEM with proven classical encryption (X25519, hybrid), as the BSI recommends for the transition. If one breaks, the other holds.

In plain terms

You get the NIST standard right away. Want especially conservative methods, say for government files? Switch to the BSI profile. One setting, no rebuild.

// NIST standard: FIPS 203
var gen8 = await Quantum.GenerateKeyPairAsync(QuantumStrength.Standard, QuantumGeneration.Gen8);   // X25519 + ML-KEM

// BSI TR-02102-1, conservative
var gen6 = await Quantum.GenerateKeyPairAsync(QuantumStrength.Medium, QuantumGeneration.Gen6);   // FrodoKEM-976

Simplified example. See the docs for exact syntax.

One solution, both worries handled.

Quantum-safe protection for those responsible, lean integration for developers, on your own infrastructure.

Quantum-safe, today

Proven and quantum-safe methods combined, protecting against tomorrow's computers too. For developers: implements FIPS 203, 204 and 205.

Sovereign, on your infrastructure

Encryption runs entirely on your side: no cloud, your data and your keys stay yours. For developers: built right into your application; only the license check may go online, and with a license file there is no outside connection at all.

Audit documentation included

Brings the cryptographic building blocks and their documentation for BSI · NIS2 · GDPR, covering the encryption part of your audit. In the Enterprise package, we build further compliance components for you on request. For developers: integrated as a package, no rewrite, identical on every platform.

Hälsa Dental

Healthcare

Patient data, encrypted quantum-safe.

Health data is especially sensitive and long-lived: attackers store encrypted data today in order to decrypt it later with quantum computers (“harvest now, decrypt later”). Classic encryption like RSA or ECC offers no lasting protection against that.

In healthcare this is decisive: a patient record, once leaked, cannot be taken back. The protection has to hold from the very start.

The dental clinic Hälsa Dental got ahead of it, and already encrypts patient data quantum-safe with SaQura: proven and post-quantum methods in one.

Confidentiality that lasts.

Hälsa Dental website

How it works

Quantum-safe in three steps.

Installed as a package, integrated right into your project: your developers do it themselves.

1

Add it

Add SaQura to your project via the package manager, with no setup or servers of your own.

2

Choose protection

Proven or quantum-safe encryption: one setting, you decide per application.

3

Encrypt

Encrypt and decrypt your data the same way everywhere, entirely on your own infrastructure.

Available for .NET, Android, iOS, Web, Python and C/C++.

Compliance

BSI, NIS2, GDPR: SaQura delivers the encryption and its documentation for your audit.

NIS2 requires the organisations it covers to have policies for the use of cryptography, the GDPR names encryption as a safeguard in line with the state of the art, and in an audit what counts is what you can prove. SaQura supports exactly that part: built to recognised standards, with evidence for procurement and review. So you can back up the encryption part of your audit with your own team. In the Enterprise package, we build further compliance components for you on request.

Talk to us
EU funding

Your PQC migration may be eligible for funding

EU and national programmes fund the move to post-quantum cryptography. It's your migration project that's funded; SaQura is the tool you implement it with.

We show you which funding programmes fit your project.

Pricing

We protect your data with quantum-safe encryption, from €490/year.

Library license and hosted API, transparently priced.

Crypto API
from €39/mo

Encryption as a hosted service, cancel anytime.

Library license
from €490/yr

Library license for your app: watermark-free, per developer.

How much Shadow AI is running in your business?

Get a clear overview of your whole company.

Get an AI assessment

Quantum-safe encryption, starting today.

Start today and go to production with a license.

Secure it now
Request consultation