Case Studies
Case Studies
Real Work. Real Environments. Real Results.
Real Work. Real Environments. Real Results.
PQStation's cryptographic posture management platform and quantum-safe migration services are not theoretical. Every engagement below is a live deployment, an ongoing pilot, or a published collaboration with a named institution.
PQStation's cryptographic posture management platform and quantum-safe migration services are not theoretical. Every engagement below is a live deployment, an ongoing pilot, or a published collaboration with a named institution.
PQStation's cryptographic posture management platform and quantum-safe migration services are not theoretical. Every engagement below is a live deployment, an ongoing pilot, or a published collaboration with a named institution.
PQStation's cryptographic posture management platform and quantum-safe migration services are not theoretical. Every engagement below is a live deployment, an ongoing pilot, or a published collaboration with a named institution.
0
0
Production and PoC engagements completed or ongoing
0
0
Sectors covered: financial services, industrial, IoT edge
0
0
Published research papers from live engagement findings
Engagement Categories
Engagement Categories
Two types of work. One platform. One team.
Two types of work. One platform. One team.
Deployments of the QVision platform — building cryptographic inventories, enforcing policy, and generating audit-ready CBOMs inside regulated environments.
Financial Services · Singapore
OCBC Bank: PQC Feasibility on Service Gateways
Integrated post-quantum cryptographic algorithms into OCBC Bank’s production service gateway chain with negligible performance overhead — and proved it on real infrastructure.
Service gateways are the out-to-in interface of a bank — the first and last cryptographic boundary for every external interaction. Each TLS termination point independently negotiates keys, making every hop a discrete quantum-vulnerable target. Migrating the gateway chain to PQC-compatible algorithms is the highest-impact first step in any quantum-safe programme.
PQStation deployed ML-KEM-512 (FIPS 203) and X25519-ML-KEM-768 hybrid key exchange at OCBC’s TLS termination points — web servers and API gateways. Pure quantum-safe and hybrid quantum-safe key exchange were both tested. Configuration was automated using PQStation’s TLS scanning framework, validated on 8,443 real-world Nginx configuration files before deployment.
Key Outcomes
→ ML-KEM key exchange enabled in TLS — validated interoperability with the existing stack
→ Negligible performance overhead versus classical-only across all PoC workloads
→ Time to First Byte: 856ms (ML-KEM) vs. 842ms (classical)
→ 8,443 real-world Nginx configurations analysed
→ Internal communication links are quantum-resilient today, with zero application-layer changes required
Demonstrated that PQC migration for service gateways is viable today — not a future-state aspiration. Banks can begin migrating their highest-impact cryptographic boundaries without disrupting existing operations or performance.
BSSN · Government of Indonesia · QVision
BSSN, Indonesia: QVision for National Cryptographic Audits
QVision has been selected by BSSN (Badan Siber dan Sandi Negara — Indonesia’s National Cyber and Crypto Agency) to conduct cryptographic audits of government agencies across Indonesia.
A national-scale mandate to assess the cryptographic posture of government agencies across Indonesia — the first sovereign-level cryptographic audit programme of its kind in Southeast Asia.
QVision is deployed as the assessment platform for cryptographic audits across participating government agencies, building a consistent cryptographic posture baseline at national scale.
Key Outcomes
→ PQStation’s first sovereign-level mandate in Southeast Asia
→ QVision established as the platform of choice for national cryptographic posture assessment
A repeatable, platform-driven approach to national cryptographic posture assessment across government agencies.
Cloud / SaaS · HR Technology · AWS
SaaS / Cloud (HRIS Vendor): QVision on AWS
Built a complete cryptographic inventory of an AWS-hosted HR Information System, identified quantum-readiness gaps, and worked with the development team to validate fixes.
An AWS-hosted environment supporting business applications — web access, APIs, cloud services, and security controls. The goal was to build a practical cryptographic inventory for cloud environments, identify quantum-readiness gaps, and produce a migration roadmap.
QVision was deployed in the AWS environment to map cryptography used in key communication paths. Cryptographic artifacts in network traffic were scanned to understand real-world encryption usage in transit. Internal Application Development teams were engaged in joint review sessions to validate findings and support remediation.
Key Outcomes
→ Cryptographic inventory of encryption usage and security posture across AWS created
→ Identified cryptographic vulnerabilities in data-in-transit communication links
→ Development team worked with PQStation to fix identified issues and validate improvements
→ Practical fixes validated in live cloud environment
Faster crypto inventory for cloud environments, clearer risk visibility, and practical fixes — validated directly with the engineering team.
Deployments of the QVision platform — building cryptographic inventories, enforcing policy, and generating audit-ready CBOMs inside regulated environments.
Financial Services · Singapore
OCBC Bank: PQC Feasibility on Service Gateways
Integrated post-quantum cryptographic algorithms into OCBC Bank’s production service gateway chain with negligible performance overhead — and proved it on real infrastructure.
Service gateways are the out-to-in interface of a bank — the first and last cryptographic boundary for every external interaction. Each TLS termination point independently negotiates keys, making every hop a discrete quantum-vulnerable target. Migrating the gateway chain to PQC-compatible algorithms is the highest-impact first step in any quantum-safe programme.
PQStation deployed ML-KEM-512 (FIPS 203) and X25519-ML-KEM-768 hybrid key exchange at OCBC’s TLS termination points — web servers and API gateways. Pure quantum-safe and hybrid quantum-safe key exchange were both tested. Configuration was automated using PQStation’s TLS scanning framework, validated on 8,443 real-world Nginx configuration files before deployment.
Key Outcomes
→ ML-KEM key exchange enabled in TLS — validated interoperability with the existing stack
→ Negligible performance overhead versus classical-only across all PoC workloads
→ Time to First Byte: 856ms (ML-KEM) vs. 842ms (classical)
→ 8,443 real-world Nginx configurations analysed
→ Internal communication links are quantum-resilient today, with zero application-layer changes required
Demonstrated that PQC migration for service gateways is viable today — not a future-state aspiration. Banks can begin migrating their highest-impact cryptographic boundaries without disrupting existing operations or performance.
BSSN · Government of Indonesia · QVision
BSSN, Indonesia: QVision for National Cryptographic Audits
QVision has been selected by BSSN (Badan Siber dan Sandi Negara — Indonesia’s National Cyber and Crypto Agency) to conduct cryptographic audits of government agencies across Indonesia.
A national-scale mandate to assess the cryptographic posture of government agencies across Indonesia — the first sovereign-level cryptographic audit programme of its kind in Southeast Asia.
QVision is deployed as the assessment platform for cryptographic audits across participating government agencies, building a consistent cryptographic posture baseline at national scale.
Key Outcomes
→ PQStation’s first sovereign-level mandate in Southeast Asia
→ QVision established as the platform of choice for national cryptographic posture assessment
A repeatable, platform-driven approach to national cryptographic posture assessment across government agencies.
Cloud / SaaS · HR Technology · AWS
SaaS / Cloud (HRIS Vendor): QVision on AWS
Built a complete cryptographic inventory of an AWS-hosted HR Information System, identified quantum-readiness gaps, and worked with the development team to validate fixes.
An AWS-hosted environment supporting business applications — web access, APIs, cloud services, and security controls. The goal was to build a practical cryptographic inventory for cloud environments, identify quantum-readiness gaps, and produce a migration roadmap.
QVision was deployed in the AWS environment to map cryptography used in key communication paths. Cryptographic artifacts in network traffic were scanned to understand real-world encryption usage in transit. Internal Application Development teams were engaged in joint review sessions to validate findings and support remediation.
Key Outcomes
→ Cryptographic inventory of encryption usage and security posture across AWS created
→ Identified cryptographic vulnerabilities in data-in-transit communication links
→ Development team worked with PQStation to fix identified issues and validate improvements
→ Practical fixes validated in live cloud environment
Faster crypto inventory for cloud environments, clearer risk visibility, and practical fixes — validated directly with the engineering team.
Ecosystem and Partnerships
Ecosystem and Partnerships
Trusted by institutions. Built with the ecosystem.
Trusted by institutions. Built with the ecosystem.
PQStation works alongside the organisations setting quantum-safe standards — as a co-author, standards contributor, and implementation partner. These are not logo relationships.
PQStation works alongside the organisations setting quantum-safe standards — as a co-author, standards contributor, and implementation partner. These are not logo relationships.
Co-Authored
Singapore Quantum-Safe Migration Handbook
Co-authored with the Cyber Security Agency of Singapore — the national playbook for enterprise quantum-safe migration, aligned to MAS and IMDA requirements.
CSA Singapore · Published Oct 2025
Co-Authored
Quantum Threat Whitepaper with Mastercard
Joint whitepaper examining the quantum threat for the financial sector — and the practical steps institutions can take to build quantum-safe resilience today.
Mastercard · Published Oct 2025
Strategic Partnership
Bosch Global Software Technologies
Active partnership for quantum-safe migration across industrial IoT and embedded systems environments — including the BGSW engagement above.
Bosch BGSW · Active
Strategic Partnership
Inturai
Collaboration on quantum-safe solutions for critical infrastructure and enterprise security deployments across the region.
Inturai · Active