Wultra
A Prague-based fintech security company providing post-quantum, mobile-first authentication and FIDO2 hardware tokens for banks.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Wultra, founded in Prague in 2014 by Petr Dvořák, builds mobile-first authentication technology for banks and fintechs, using NIST-endorsed quantum-resistant cryptography combined with FIDO2 hardware tokens. Rather than treating post-quantum security as a future migration project, Wultra bakes quantum-resistant algorithms into its authentication stack now, aiming to give financial institutions a head start before PQC becomes a compliance mandate.
The company’s reported client base includes named banks such as Raiffeisen Bank International, Erste Digital, and OTP Bank, which is a meaningfully concrete adoption signal for a company of its size. It raised a €3 million seed round in January 2025, led by Tensor Ventures with Elevator Ventures and J&T Ventures participating, to fund expansion into Western Europe and Southeast Asia, including a planned Singapore office; later reporting describes a larger, less fully corroborated Series A aimed at US and Middle East expansion.
Wultra’s differentiation is combining banking-grade mobile authentication with quantum-resistant cryptography from day one, rather than selling PQC migration as a separate product. Because it operates at the intersection of IAM and quantum resilience, its risk profile is tied to how quickly European banks adopt quantum-resistant authentication standards — a trend that is still in its early stages industry-wide.
Innovation Matrix Assessment
A decade-old mobile authentication business that has recently layered in quantum-resistant cryptography and is actively expanding into new regional markets.
Gives banks quantum-resistant authentication without waiting for a dedicated PQC migration project, reducing future rework.
Named bank customers across multiple European markets are solid evidence, though total disclosed funding (a few million euros) is modest relative to the ambition of US/Middle East expansion plans.
Combining FIDO2 and PQC in one banking authentication product is a sensible integration rather than a new category of defense.
Named production customers at real banks (Raiffeisen Bank International, Erste Digital, OTP Bank) represent genuine field deployment rather than pilot-only usage.
Financial services will be among the earliest and most regulated adopters of quantum-resistant authentication.
Why CISOs Should Care
Lets a bank's security team adopt quantum-resistant authentication within an existing mobile banking flow instead of running a separate migration project.
What Makes It Different
Builds quantum resistance into banking-grade mobile authentication by default, rather than as a bolt-on migration product.
The Matrix Verdict
60/100 — INCREMENTAL INNOVATOR
An Incremental Innovator with credible named banking customers and a sensible product thesis, still in the early stages of scaling beyond its European base.
Editorial Note: Claims vs. Verified Findings
Named bank customers are repeated across multiple funding-announcement sources; the €6.8M Series A figure and US/Middle East expansion details are less consistently corroborated and should be treated as preliminary.
Sources
Alternatives to Wultra
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Silverfort
Agentless unified identity protection platform that extends MFA, ITDR, and access policy to legacy and unmanaged systems traditional…