Case Studies
Real Work. Real Environments. Real Results.
PQStation's cryptographic posture management platform and quantum-safe migration services are not theoretical. Every engagement below is a live deployment, an ongoing pilot, or a published collaboration with a named institution.
PQStation's cryptographic posture management platform and quantum-safe migration services are not theoretical. Every engagement below is a live deployment, an ongoing pilot, or a published collaboration with a named institution.
0
0
Production and PoC engagements completed or ongoing
0
0
Sectors covered: financial services, industrial, IoT edge
0
0
Published research papers from live engagement findings
Engagement Categories
Two types of work. One platform. One team.
Deployments of the QVision platform — building cryptographic inventories, enforcing policy, and generating audit-ready CBOMs inside regulated environments.
Financial Services · Singapore
OCBC Bank: PQC Feasibility on Service Gateways
Integrated post-quantum cryptographic algorithms into OCBC Bank’s production service gateway chain with negligible performance overhead — and proved it on real infrastructure.
Service gateways are the out-to-in interface of a bank — the first and last cryptographic boundary for every external interaction. Each TLS termination point independently negotiates keys, making every hop a discrete quantum-vulnerable target. Migrating the gateway chain to PQC-compatible algorithms is the highest-impact first step in any quantum-safe programme.
PQStation deployed ML-KEM-512 (FIPS 203) and X25519-ML-KEM-768 hybrid key exchange at OCBC’s TLS termination points — web servers and API gateways. Pure quantum-safe and hybrid quantum-safe key exchange were both tested. Configuration was automated using PQStation’s TLS scanning framework, validated on 8,443 real-world Nginx configuration files before deployment.
Key Outcomes
→ ML-KEM key exchange enabled in TLS — validated interoperability with the existing stack
→ Negligible performance overhead versus classical-only across all PoC workloads
→ Time to First Byte: 856ms (ML-KEM) vs. 842ms (classical)
→ 8,443 real-world Nginx configurations analysed
→ Internal communication links are quantum-resilient today, with zero application-layer changes required
Demonstrated that PQC migration for service gateways is viable today — not a future-state aspiration. Banks can begin migrating their highest-impact cryptographic boundaries without disrupting existing operations or performance.
BSSN · Government of Indonesia · QVision
BSSN, Indonesia: QVision for National Cryptographic Audits
QVision has been selected by BSSN (Badan Siber dan Sandi Negara — Indonesia’s National Cyber and Crypto Agency) to conduct cryptographic audits of government agencies across Indonesia.
A national-scale mandate to assess the cryptographic posture of government agencies across Indonesia — the first sovereign-level cryptographic audit programme of its kind in Southeast Asia.
QVision is deployed as the assessment platform for cryptographic audits across participating government agencies, building a consistent cryptographic posture baseline at national scale.
Key Outcomes
→ PQStation’s first sovereign-level mandate in Southeast Asia
→ QVision established as the platform of choice for national cryptographic posture assessment
A repeatable, platform-driven approach to national cryptographic posture assessment across government agencies.
Cloud / SaaS · HR Technology · AWS
SaaS / Cloud (HRIS Vendor): QVision on AWS
Built a complete cryptographic inventory of an AWS-hosted HR Information System, identified quantum-readiness gaps, and worked with the development team to validate fixes.
An AWS-hosted environment supporting business applications — web access, APIs, cloud services, and security controls. The goal was to build a practical cryptographic inventory for cloud environments, identify quantum-readiness gaps, and produce a migration roadmap.
QVision was deployed in the AWS environment to map cryptography used in key communication paths. Cryptographic artifacts in network traffic were scanned to understand real-world encryption usage in transit. Internal Application Development teams were engaged in joint review sessions to validate findings and support remediation.
Key Outcomes
→ Cryptographic inventory of encryption usage and security posture across AWS created
→ Identified cryptographic vulnerabilities in data-in-transit communication links
→ Development team worked with PQStation to fix identified issues and validate improvements
→ Practical fixes validated in live cloud environment
Faster crypto inventory for cloud environments, clearer risk visibility, and practical fixes — validated directly with the engineering team.
Ecosystem and Partnerships
Trusted by institutions. Built with the ecosystem.
PQStation works alongside the organisations setting quantum-safe standards — as a co-author, standards contributor, and implementation partner. These are not logo relationships.
Co-Authored
Singapore Quantum-Safe Migration Handbook
Co-authored with the Cyber Security Agency of Singapore — the national playbook for enterprise quantum-safe migration, aligned to MAS and IMDA requirements.
CSA Singapore · Published Oct 2025
Co-Authored
Quantum Threat Whitepaper with Mastercard
Joint whitepaper examining the quantum threat for the financial sector — and the practical steps institutions can take to build quantum-safe resilience today.
Mastercard · Published Oct 2025
Strategic Partnership
Bosch Global Software Technologies
Active partnership for quantum-safe migration across industrial IoT and embedded systems environments — including the BGSW engagement above.
Bosch BGSW · Active
Strategic Partnership
Inturai
Collaboration on quantum-safe solutions for critical infrastructure and enterprise security deployments across the region.
Inturai · Active