Secure Corporate researches and builds ways to keep communication private — not against today's adversary, but against the one already recording traffic and waiting for the mathematics to catch up. QuantumPost is our first product, now in alpha and not released yet. It will not be the last.
Four horizons. Each one is only reachable because of the one before it, which is why they are numbered rather than listed — and they get less certain as they go.
Cryptography that nobody can operate protects nobody. Our first job is software people actually use every day, with the strongest available algorithms turned on by default rather than hidden behind an expert setting.
One application covers one part of a life. The research that went into QuantumPost — post-quantum transport, anonymity routing, key handling people cannot get wrong — carries into everything that follows it.
The line so far adds a console that keeps virtual machines walled off, Vobella for mastering your own DVDs without uploading them anywhere, and, next, QuantumPost on your phone.
Access to a real quantum computer would let us attack our own cryptography with the machine it was designed to resist, and build entropy sources whose randomness is physical rather than computed. We would rather find our own weaknesses than have somebody else find them quietly.
A diamond chip in your own device, not only in a lab. Nitrogen-vacancy centres in synthetic diamond work at room temperature — almost every other quantum approach needs cooling near absolute zero, which rules out a consumer device before you start. It would draw your keys from a physical quantum process rather than a computed one, closing a gap that no amount of software can.
We are nowhere near this. No chip, no prototype, no timeline — it is the direction, not a product.
QuantumPost and Key Manager are in alpha and are not released yet.
An encrypted communication platform — chat, mail, rooms, a social feed, an encrypted vault and a password manager — over a post-quantum transport, with optional Tor routing and no IP logging.
It also carries the Secure Browser: a real browser engine, built from source and embedded in the client rather than borrowed from the operating system.
The post-quantum key generation underneath QuantumPost, as a tool on its own. ML-DSA signing keys and ML-KEM encryption keys, from a desktop window or a single command — planned as a standalone tool with no account or phone-home activation.
A console for virtual machines: profiles, live health, snapshots and sessions you can reconnect to. Shared folders are an airlock that stays shut until you open it.
A DVD mastering studio for Windows 11 and Debian Linux, written in Rust from the ground up: no outside programs, no network, no account. So far it is the editor; making and burning the disc is still being built.
The phone app, starting with a Pixel 7a running GrapheneOS: no Google Play services, its own Tor, and the desktop's rules. Not started yet.
The full product line, including what hasn't been built yet →
The Windows client is now built with LLVM, and needs only the libraries that ship inside Windows — no Visual C++ runtime. Its OpenSSL is 3.5.9 LTS, built from the signed release. Same code: every test passes as before.
SQLite with SQLCipher: the whole file encrypted with AES-256 and every page checked for tampering. No database server on your PC, no open port, no accounts to guess.
⚑ on every post and profile. Reports are sealed to the moderators, and new posts are signed by their authors, so a moderator can check a report without trusting the server — or the reporter.