From Quantum-Safe to Future-Proof
Revolutionizing Data Security with Quantum Technology
Press Release
QuDef and The Thought Projects Partner to Bring QKD Security Assurance to Asia-Pacific
Memorandum of Understanding brings QuDef's SQOUT® threat intelligence platform to Singapore, combining structured threat and risk assessment with TTP's independent QKD security testing.
Delft, The Netherlands, 12 October 2026 – QuDef, a Netherlands-based leader in quantum technology security, and The Thought Projects (TTP), a Singapore-based innovation leader in future-proof data security and Quantum Key Distribution (QKD) security evaluation, today announced a strategic collaboration.
The two companies have signed a Memorandum of Understanding (MOU) under which TTP will bring QuDef's flagship SQOUT® platform to Singapore and the broader Asia-Pacific market. The collaboration aims to strengthen the security assurance ecosystem for quantum communication technologies and support the adoption of trusted quantum-safe solutions across the region.
As governments, critical infrastructure operators, telecommunications providers, and enterprises deploy QKD alongside post-quantum cryptography (PQC), the security of the deployed systems, not only of the underlying protocols, has become a strategic priority. QKD security proofs rest on assumptions about the physical devices, and real implementations can deviate from them, as published attacks on commercial systems have shown. Organizations therefore need a structured method to understand vulnerabilities, assess risks, and validate security claims throughout the system lifecycle.
Bringing European quantum security expertise to Asia-Pacific
SQOUT® is QuDef's threat intelligence and knowledge platform which is used for systematic threat and risk assessment of QKD products and quantum communication networks.
Key features of SQOUT® include:
- Threat knowledge base: 149 attack techniques, 191 countermeasures, 34 quantum protocols, 123 vulnerabilities, 12 security proofs, and 124 hardware components and 29 software elements mapped to threat scenarios.
- Risk assessment: an ISO/IEC 27005-compatible risk scoring framework that evaluates likelihood and impact across attack kill chains.
- Interactive modules: QBuilder (device level) and QNetwork (network level) for security architecture modelling and QAnalyser for automated "what-if" security analysis.
- Flexible deployment: SaaS, or on-premises virtual machine deployment for sovereign and classified environments.
Combined with TTP's white-box, grey-box, and black-box security evaluation and testing of commercial QKD systems, the collaboration gives organizations an end-to-end security assurance pathway: SQOUT-based threat and risk assessment identifies and prioritizes the attack vectors that matter for a specific deployment, and TTP's laboratory evaluation tests them on the actual hardware.
Supporting trusted quantum-safe adoption
"The future of quantum-secure communications will depend on the trust organisations will have in the technology. They need to have confidence not only in the cryptography, but also in the security of systems on which it is running," said Dr. Bob Dirks, CEO of QuDef. "Together, QuDef and TTP provide a unique combination of threat intelligence, risk assessment, and security evaluation expertise that helps governments, critical infrastructure operators, and technology providers to make informed decisions and accelerate the adoption of trusted quantum-safe technology solutions worldwide."
"Over the past five years, we have seen growing interest in deploying QKD alongside post-quantum cryptography (PQC) to secure highly sensitive data. QuDef's SQOUT is a cutting-edge threat intelligence and knowledge platform that enables systematic risk and threat assessments of QKD products. Combined with TTP's white-box, grey-box and black-box QKD security evaluation and testing capabilities, we will be able to help our clients achieve a high level of security assurance," said Dr. Lim Han Chuen, co-founder of TTP.
From theoretical claims to evidence-based assurance
By bringing together QuDef's expertise in quantum threat intelligence and security assessment with TTP's specialized evaluation capabilities, the two organizations will help customers move beyond theoretical security claims toward measurable, evidence-based security assurance.
As quantum technologies continue to mature, trusted deployment and independent security validation will become more an more important in safeguarding national infrastructure, secure communications, and high-value data assets.
About QuDef
QuDef is a quantum technology security company based in Delft, the Netherlands, dedicated to enabling the secure adoption of quantum technologies. Its SQOUT® platform provides threat intelligence, risk assessment, and security assurance capabilities for quantum systems and networks. QuDef also develops monitoring solutions for quantum communication networks and provides specialized expertise in quantum communications, quantum-secure architectures, and strategic threat intelligence
About The Thought Projects
The Thought Projects is a Singapore-based data security technology company with deep expertise in future-proof data security, specializing in the security evaluation and vulnerability testing of commercial quantum key distribution (QKD) systems. TTP is also actively developing data protection solutions. TTP's mission is to ensure future-proof data security in the post-quantum era.
Synopsis: Post-Quantum Cryptography (PQC) migration can be a multi-year effort, and this creates a security gap as sensitive data may remain vulnerable to future quantum computing attacks during the migration. In this session, I will discuss how Quantum Key Distribution (QKD) can help reduce the risk of future data breaches. Although not yet formally certified, commercial QKD systems can undergo rigorous security testing, while QKD networks can be continuously monitored to provide a high level of security assurance. I will show how QKD can already help protect your organization’s sensitive data today while PQC migration is still in progress.
Insights
Independent Security Evaluation and Testing of Commercial QKD Products
Singapore, 27 November 2025 – The security of quantum key distribution (QKD) is well established theoretically. However, real-world implementations often deviate from idealized theoretical models and this could potentially introduce security loopholes exploitable by attackers. Hence, independent third-party evaluation and testing of commercial QKD products are crucial before deployment to ensure security.
The Thought Projects (TTP) has deep domain expertise and extensive hands-on experience in evaluating and testing commercial QKD products. We do not develop QKD systems, nor do we have ties with any QKD manufacturer. This independence ensures that our evaluation and testing remain fair, unbiased and trustworthy.
We are also committed to safeguarding the intellectual property of QKD manufacturers. All testing activities are conducted in highly secured facilities with stringent physical access controls, and all test reports are handled with strict confidentiality. For QKD manufacturers who prefer not to disclose too much detailed technical information, we offer a black box testing methodology that requires only minimal system information while still enabling rigorous evaluation.
To date, we have completed security evaluation and testing of several commercial QKD products. These products are currently being considered for deployment in our clients' operational networks. The vulnerabilities that we have tested include Trojan horse attacks, transmitter information leakage, detector backflash loophole, and other known implementation weaknesses. While we reference international standards on QKD implementation security and testing, we are not constrained or limited by them. We have developed our own comprehensive testing and evaluation framework and methodology shaped by client requirements and refined in consultation with QKD manufacturers.
As the security of QKD depends critically on its optical hardware implementation — which can vary from system to system — we strongly recommend testing every QKD unit prior to deployment. This will ensure that no unnoticed hardware faults or component defects compromise the security of the generated keys.
New Product
TTP Unveils New Product to Counter the Quantum Computing Threat
Singapore, 23 October 2025 – Today, The Thought Projects (TTP) unveiled a new product called DenseKey Transceiver to counter the quantum computing threat. The rapidly advancing quantum computing technology poses a serious threat to data security. Malicious actors can harvest encrypted data now and decrypt it later once a large-scale quantum computer becomes available. We need to begin replacing quantum-vulnerable algorithms with quantum-safe alternatives.
For organizations handling highly-sensitive data or requiring long-term data protection, a defense-in-depth strategy is recommended.
First layer of defense – Post-Quantum Cryptography (PQC)
PQC should be used for key exchange. However, the security of PQC is not mathematically proven. Future breakthroughs in cryptanalytic techniques could break or weaken current PQC schemes.
Second layer of defense – Quantum Key Distribution (QKD)
QKD can be used in combination with PQC. By combining PQC and QKD keys into a single hybrid key, the overall system is secure as long as at least one of them remains secure. Although QKD has been theoretically proven to be secure, and QKD products may undergo rigorous security evaluation and testing, practical QKD products may still contain undiscovered side-channels that could potentially expose them to zero-day attacks.
Third layer of defense – Ciphertext Masking
As an additional safeguard, ciphertext masking can be applied. The method ensures an attacker cannot obtain a usable copy of the ciphertext from the data channel. Without a usable copy of the ciphertext, even if the attacker compromises both PQC and QKD keys, there would be nothing for the attacker to decrypt.
The DenseKey Transceiver implements quantum noise ciphertext masking that prevents any attacker from harvesting the ciphertext from the data channel. Quantum noise is a fundamental property of nature. It is truly random and cannot be predicted or manipulated by anyone. This product supports a data rate of 1.25 Gbps. The transmission distance has been tested up to 200 km. It is plug-and-play and compatible with other cryptographic schemes, including AES, PQC and QKD.
Press Release
TTP Launches Security Evaluation and Testing Services for Commercial QKD Products
Singapore, 21 October 2025 – The Thought Projects (TTP), a Singapore-based innovation leader in the space of future-proof data security, today announced the launch of its Quantum Key Distribution (QKD) Security Evaluation and Testing Services. Building on its completion of white-box testing on multiple commercial QKD products, TTP now offers organizations a comprehensive suite of QKD security evaluation and testing services — spanning white-box, grey-box, and black-box approaches — to validate and strengthen the security of commercial QKD products.
QKD is widely regarded as a cornerstone of future-proof data networks, offering provably secure key exchange to defend against the emerging quantum computing threat. However, real-world implementations often introduce side-channel vulnerabilities that could undermine security. Independent security evaluation and testing is therefore crucial to ensure protection against side-channel attacks and build trust among end-users.
“Having completed white box testing of multiple commercial QKD products, we have unique insights into both the strengths and weaknesses of today’s commercial QKD implementations,” said Dr. LIM Han Chuen, co-founder of TTP. “Thanks to our white-box testing experience, our grey- and black-box evaluation methodologies are rigorous and comprehensive, delivering results that clients can trust. By offering white-box, grey-box, and black-box testing, we give our clients the flexibility to choose the type of evaluation that best matches their security needs.”
As an independent third-party with no connection to any QKD manufacturer, TTP is unbiased in its security evaluation and testing work. Beyond testing and identifying risks, TTP also provides actionable recommendations that help clients enhance their security and improve resilience. The combination of real-world experience and deep technical expertise has established TTP as a trusted partner for early adopters of QKD.
About TTP
The Thought Projects (TTP) is a Singapore-based data security technology company with deep expertise in future-proof data security, specializing in the security evaluation and vulnerability testing of commercial quantum key distribution (QKD) systems. TTP is also actively developing data protection solutions. TTP’s mission is to ensure future-proof data security in the post-quantum era.
From Quantum-Safe to Future-Proof
Revolutionizing Data Security with Quantum Technology
Quantum-Safe Data Protection
QUANTUM COMPUTING THREAT
Large-scale quantum computers would be capable of breaking most of the asymmetric cryptographic schemes in use today. This poses a serious threat to the security of our sensitive data.
HARVEST NOW, DECRYPT LATER
Attackers can harvest encrypted data transmitted over public networks today and decrypt it later using quantum computers, once they become available.
POST-QUANTUM CRYPTOGRAPHY
Post-quantum cryptography (PQC) consists of algorithms that are believed to be resistant against quantum computer attacks, and several have already been standardized. Organizations should begin migrating to PQC as soon as possible.
QUANTUM KEY DISTRIBUTION
Quantum key distribution (QKD) exploits quantum physics to distribute cryptographic keys with theoretically perfect security. Rigorous security evaluation and testing are essential to ensure the absence of side-channel vulnerabilities in QKD systems.
HYBRID SCHEME
The most effective strategy today is to combine PQC and QKD into a hybrid scheme for defense-in-depth. As long as one of them remains secure, sensitive information is protected. The likelihood of an attacker compromising both is extremely low.
SUPPORT
We do not sell QKD or PQC products. As an independent third-party, we are committed to providing unbiased guidance to our clients in selecting the most suitable quantum-safe solutions and in ensuring the security of their sensitive data.
Consultancy Services
01
Quantum-safe data protection
02
Quantum key distribution system security evaluation & testing
03
Malware-resistant computing and networking architectures
04
Quantum engineering laboratory setup & training
QKD Short Course
Specially designed for executives who wish to learn the fundamentals of QKD and understand its strategic importance.
At the end of this course, participants will be able to answer the following questions.
- Why is quantum computing a threat to data security?
- How can we be quantum-safe?
- How to construct a quantum-safe network?
- How does QKD work?
- Why is there a need to test the security of QKD systems?
- What is quantum internet and why is it challenging?
- How can we work toward future-proof security?