Skip to content

CryptoNext Security

A Paris-based software vendor that discovers, remediates, and manages cryptographic assets so enterprises can migrate to post-quantum algorithms.

Visit Website ↗ + Add to Compare Claim This Company
62/100Incremental Innovator

Overview

CryptoNext Security, founded in 2019 out of research at Inria, CNRS, and Sorbonne University, sells software that covers the full post-quantum migration lifecycle: discovering where RSA and ECC are embedded across an organization’s IT and OT estate, remediating those instances with NIST-standardized algorithms, and then managing crypto-agility on an ongoing basis. The company raised €11 million in late 2023, led by AXA Venture Partners and Quantonation, to industrialize its remediation tooling and expand internationally.

Its most concrete real-world proof point is government-facing: the French Embassy in the United States reportedly used CryptoNext’s post-quantum stack to send an encrypted diplomatic message to Paris, and the company was featured in France’s 2030 national investment communication campaign around quantum research. It is also one of six partners — alongside Thales, which coordinates the project, TheGreenBow, CryptoExperts, ANSSI, and Inria — in RESQUE, a three-year France 2030/Bpifrance-funded project to build a hybrid post-quantum VPN.

What sets CryptoNext apart from algorithm libraries is that it treats PQC migration as an inventory-and-remediation problem rather than a cryptography problem, which is closer to what most enterprise crypto teams actually need first. The caveat is that outside of government pilots and the RESQUE consortium, independently verified commercial deployments are thin in public reporting.

Innovation Matrix Assessment

Innovation Velocity 6/10

Academic-origin algorithm work has turned into shipping discovery-to-remediation tooling and a national-level VPN research consortium within a few years.

Operational Value 7/10

Covers the full discovery-remediation-management lifecycle that crypto-agility programs actually need, rather than just an algorithm library.

Market Momentum 5/10

€11M raised and a real French government pilot are solid signals, but public evidence of broad commercial customer adoption beyond pilots and consortia is limited.

Category Disruption 6/10

Framing PQC migration as an enterprise-wide crypto-inventory problem, rather than a drop-in algorithm swap, changes how organizations approach the transition.

Real-World Efficacy 5/10

A real diplomatic message encrypted and sent using its stack is genuine outside-the-lab usage, though it is a single high-profile pilot rather than broad field evidence.

Enduring Relevance 8/10

Crypto-agility and PQC migration tooling will be mandatory enterprise workstreams through the rest of this decade.

Why CISOs Should Care

Gives security teams a way to find every place RSA/ECC is hiding in their environment before a migration deadline forces a scramble.

What Makes It Different

Treats PQC adoption as a discovery-and-remediation program rather than a cryptography library swap.

The Matrix Verdict

62/100 — INCREMENTAL INNOVATOR

An Incremental Innovator with a credible academic pedigree and a real government-grade proof point, but still building out broad commercial traction beyond pilots.

Editorial Note: Claims vs. Verified Findings

Claims of being a Gartner PQC top-five vendor and first NIST NCCoE European pick come from the company's own materials and haven't been independently confirmed here; the embassy pilot and RESQUE consortium membership are corroborated by multiple outlets.

Sources