
The film3:44
SaQura in 3 minutes
Why post-quantum encryption matters now — and how SaQura makes it simple.
Watch the filmSaQura brings post-quantum cryptography to .NET, Android, Web, Swift, Python and C/C++ — via a package, in a day, without putting your existing project at risk. The same encryption on every platform.
# Quantum-safe in a day — your existing code stays dotnet add package SaQura var (pub, priv) = await Quantum.GenerateKeyPairAsync(QuantumStrength.Standard, QuantumGeneration.Gen8); // X25519 + ML-KEM var (secret, cipher) = await "Hello".EncryptWithQuantumAsync(pub); // FIPS 203/204/205 algorithms · BSI profile selectable
New at SaQura
1 of 3: The film
The challenge
And the clock is ticking — the BSI has set an expiry date for classical encryption.
BSI guidance: 2030/2031 cut-off
On 11 February 2026 the BSI set an end date for classical asymmetric encryption: RSA and ECC should be used on their own only until the end of 2030 for highly sensitive data, and until the end of 2031 in general — after that only in combination with quantum-safe schemes. Public authorities and critical infrastructure are urged to migrate now.
Source: BSI TR-02102-1 (2026 edition) · BSI press release of 11 Feb 2026
Why SaQura
Quantum-safe encryption compared — at a glance.
| Product A | Product B | SaQura | |
|---|---|---|---|
| Protection against quantum computers | Must build it yourself | Only in transit | ✓ |
| Ready to use (no setup) | ✗ | Customisation needed | ✓ |
| Cross-platform | ✗ | Vendor-locked | App · web · server |
| Also protects stored data | ✗ | Transit only | ✓ |
| Ready in | Weeks | Days | One day |
| Audit evidence (GDPR · NIS2) | Build it yourself | Depends on vendor | ✓ |
| Support in your language | Community only | English | German · English · Japanese |
Based on publicly available information (June 2026); not a guarantee for any specific case.
Standards
The global NIST standard, or the conservative profile the BSI recommends for the highest protection needs — both are built in. One setting decides.
ML-KEM for key exchange — the globally agreed post-quantum standard.
For: teams following the international standard.
FrodoKEM and Classic McEliece — older, more thoroughly studied, built for maximum caution.
For: government, critical infrastructure, anything that must stay secret for decades.
We combine both with proven classical encryption (hybrid) — exactly as the BSI recommends for the transition. If one breaks, the other holds.
In plain terms
You get the internationally recognized standard right away. Need maximum caution — say, for government files — switch to the BSI profile. One setting, no rebuild.
// Global standard: NIST / FIPS 203 var gen8 = await Quantum.GenerateKeyPairAsync(QuantumStrength.Standard, QuantumGeneration.Gen8); // X25519 + ML-KEM // BSI-recommended, conservative var gen6 = await Quantum.GenerateKeyPairAsync(QuantumStrength.Medium, QuantumGeneration.Gen6); // FrodoKEM-976
Simplified example — see the docs for exact syntax.
EU and national programmes fund the move to post-quantum cryptography. It's your migration project that's funded — SaQura is the tool you implement it with.
Whether and to what extent funding is available depends on the specific programme and your project. SaQura itself is not the subject of any grant.
The solution
Strongest protection for those responsible, least effort for developers — on your own infrastructure.
The strongest encryption — even against tomorrow's computers. Proven and quantum-safe methods in one solution. For developers: built to today's international standards.
Encryption runs entirely on your side — no cloud, your data and your keys stay yours. For developers: built right into your application; only the licence check may go online, and with a licence file there is no outside connection at all.
Brings the cryptographic building blocks and evidence for BSI · NIS2 · GDPR — the encryption part of your audit. Full compliance is in the Enterprise package. For developers: integrated as a package, no rewrite, identical on every platform.
Healthcare
Health data is especially sensitive and long-lived: what is intercepted today can be decrypted years later with a quantum computer (“harvest now, decrypt later”). Classic encryption like RSA or ECC offers no lasting protection against that.
In healthcare this is decisive: a patient record, once leaked, cannot be taken back — the protection has to hold from the very start.
The dental clinic Hälsa Dental got ahead of it, and already encrypts patient data quantum-safe with SaQura — proven and post-quantum methods in one.
Confidentiality that lasts.
Hälsa Dental websiteOur products
Build it into your app, use it as a ready-made service, run it all yourself — or simply protect your files. Pick what fits.
Encryption inside your app
Add SaQura as a package — the encryption runs entirely on your own infrastructure, your data and keys stay with you.
For: Teams who build it into their own software.
Encryption as a service
Call a secure API — you write no encryption yourself and run no infrastructure.
For: Anyone who wants to start fast without building encryption themselves.
Hosted in Germany · REST API
Encryption in your AI assistant
Give your AI assistant (e.g. Claude) secure encryption — it encrypts and decrypts locally on your machine, with no coding at all. Your data never leaves your computer.
For: Anyone using AI assistants who wants encryption without code.
Runs locally · via NuGet (dnx)
On-premise & sovereign
Run SaQura entirely on your own infrastructure — with central management, policies and MDM rollout. The server never sees plaintext.
For: Public agencies, critical infrastructure and regulated industries.
On-premise · Managed
Know what's quantum-unsafe
An app that scans your systems and shows, in plain language, which encryption you use and what quantum computers will break — with a report and roadmap.
For: Organisations that must prove their quantum security (BSI, NIS2, GDPR).
Annual license · runs locally
Certificates watched, outages prevented
The watchdog on your own server checks your domains daily, warns you well before anything expires and proves it with sealed reports — trial mode without a license.
For: IT operations and service providers who never want an outage from a forgotten certificate again.
Annual subscription · self-host · Windows/macOS/Linux · iPhone app
Every certificate under your domain, graded, in minutes
Enter your domain, pay, done: the sealed report finds every certificate for your domain through the public registers, checks each address live from the outside and grades it from A to F — no installation, no credentials.
For: Management and IT who want to know today what runs under their domain and when it expires.
One-time purchase · PDF by e-mail · EN/DE/JA
CRA reporting duty from 11 September: the process, ready to use
Anyone selling software or devices with software in the EU must report actively exploited vulnerabilities within 24 hours. The template turns the duty into a process: deadlines, decision tree, four report texts under Article 14, case log — as DOCX and PDF, English and German.
For: Manufacturers of software and devices with software who want to know on day one who reports what, when and where.
One-time purchase · DOCX + PDF by e-mail · EN/DE
Backup only you can open
Zero-knowledge, end-to-end encrypted backup — files are encrypted on your device before they ever leave it. The storage side never sees plaintext.
For: Law/tax firms, clinics and any business with confidential, retained documents.
GDPR/GoBD-oriented · EU-hosted or self-hosted
The same quantum-safe encryption as the rest of SaQura — now for talking. No account, no phone number, no trail. Self-hostable and centrally managed.

SaQura PQC Scan finds quantum-vulnerable cryptography (RSA, ECC …) in your code — as a GitHub Action or from the command line, in 30 seconds.
The family
Server, app, web — the same encryption, identical on every platform.
For .NET servers & desktop apps · 1.0.15
For Android apps · 1.2.2
For web apps in the browser · 0.1.0
For iPhone & iPad apps · 1.2.0
For services, scripts & data pipelines · 1.0.9
For embedded, desktop & native code · 1.0.1
Encryption as a hosted service
Try it from your AI assistant
Secure messaging app (E2EE)
Encrypt on one device, decrypt on any other.
One format, compatible across every platform — proven device to device. iPhone, Android, Windows, server and web share the exact same encryption. So a single solution covers your whole stack, instead of something different per platform.
How it works
Installed as a package, integrated in minutes — your developers do it themselves, no expensive specialists.
Add SaQura to your project via the package manager — in minutes, no setup or servers of your own.
Proven or quantum-safe encryption — one setting, you decide per application.
Encrypt and decrypt your data — the same everywhere, entirely on your own infrastructure.
Free tier ready immediately — no account needed. Available for .NET, Android, Web, Swift, Python and C/C++.
Compliance
The rules require modern encryption to the state of the art — and in an audit you must be able to prove it. SaQura supports exactly that part: built to recognised standards, with evidence for procurement and review. So you can back up the encryption part of your audit, without expensive specialists — full compliance we support in the Enterprise package.
Talk to usPricing
Try it free. Library license and hosted API — transparently priced.
All methods to try out — no account needed.
Encryption as a hosted service, cancel anytime.
Library license for your app — watermark-free, per developer.
Start today — try it free, go to production with a license.
Secure it now