A deep-tech cryptographic engineering company that keeps high-stakes systems private, provable, and quantum-resistant.

Global
Unpopular opinion: crypto agility is a bit of a fantasy 🦄 It's becoming a real buzzword across the industry right now. But is it actually a smart move? People don't build cryptography. They build applications, and the crypto has to fit whatever limits the app sets. The cryptography team at @HorizenLabs explain👇
8
8
53
4,088
"We are a bit late. The cryptographic community has been raising the alarms for years." Episode 6 of The Post-Quantum Experience is now live, with Tommaso Gagliardoni, founder of Lucumo Security and cryptography research team lead at @HorizenLabs. From government deadlines and falling qubit estimates to forged signatures, Satoshi's coins and the biggest myths in quantum security, hear from a cryptographer who's been working on this since 2011. Watch 👇
9
13
68
7,819
A question worth putting to your cyber risk committee this week: What is the earliest external date that forces us to move to quantum-resistant encryption, and is it on our plan? Most institutions can't answer it. Not because the work is impossible, but because no one has been told to finish by when, and most don't have a map of where their encryption actually lives. One financial regulator actually measured how ready its banks are for the shift to quantum-resistant encryption. Nearly three-quarters were not. That is a Swiss figure. The more uncomfortable point: no US regulator measures this at all, so for the US banking system, the honest answer to "how ready are we" is that nobody knows, because nobody has been required to say. This week's Quantum-Resistance Intelligence Newsletter breaks down: ❓ what that means for anyone who owns cryptographic risk at a financial institution. ❓ why the readiness question is unanswerable without a cryptographic inventory, and ❓what to ask before your next audit. Read now👉 linkedin.com/pulse/72-survey…
1
1
7
1,644
In Part 2 of our quantum-resistant migration series, we lay out Horizen Labs' roadmap for migrating our infrastructure to quantum-resistant (QR) cryptography. The industry consensus says harvest-now-decrypt-later is the urgent problem and signatures can wait. Horizen Labs' own infrastructure audit found close to the opposite. Our Quantum Security and Cryptography Lead Tommaso Gagliardoni breaks down why: encryption is a configuration change, but quantum-resistant signatures for most of what a company signs (fund custody, code commits, contracts) do not exist yet in deployable form. The result at Horizen Labs: SSH and TLS are already hybrid quantum-resistant. Signing is not, and it is the harder problem. Read the full article 👉 bit.ly/4jjLORF
1
13
1,032
Quantum risk is a statement about the shelf life of encrypted data. Insurance is a business built on retaining sensitive records for very long periods, which is precisely the data profile that harvest now, decrypt later is designed to exploit. The exposure runs both ways: the archives insurers hold, and the policyholders they underwrite. Neither is currently modeled. FINMA has named a deadline. Of 60 Swiss financial institutions it surveyed, 8% had a migration roadmap. It now expects a board-approved roadmap by mid-2027. New from the Horizen Labs Quantum Security Team: what the exposure actually is, and the two workstreams to run before the next renewal cycle. 👉Read it full here: bit.ly/4yU23K0
1
10
965
We talk a lot about protecting infrastructure and data. This is a good reminder of what that actually means for the people behind it. This is why the work matters.
1
8
838
NIST finalized three quantum-resistant standards, FIPS 203, 204, and 205, in August 2024. In March 2025, it selected a fourth algorithm, HQC, as a backup standard. The final HQC standard isn't expected until 2027. That's your regulatory baseline. The harder question: does your vendor stack meet it? Most vendor cryptographic implementations haven't caught up. And most organizations don't know which vendors are exposed, because nobody's mapped it. Every vendor relationship is a cryptographic surface. Adversaries harvesting encrypted data today don't need a quantum computer yet; they just need to wait. Unmapped cryptographic exposure in a supply chain isn't a future problem. It's an unquantified liability today. We map that exposure in 7-10 days. No software, no operational changes. 🔗bit.ly/QuantumSecurity
1
5
820
1/ @AnthropicAI's Enterprise Frontier Safeguards address a real institutional concern: AI outputs and the data feeding them should stay under organizational control. Keeping logs in your cloud is a meaningful step. It is not the same as being able to prove what the model produced and under what conditions. High-stakes systems need both: 1️⃣Outputs confidential to authorized parties 2️⃣Verifiable to those who must account for them. 🧵
1
3
1,003
6/ Anthropic's Log retention in customer cloud infrastructure is a legitimate control worth having. But if your AI assurance framework rests on it, you have accepted a custody model in a context that will eventually demand a verification model.
1
50
7/ We're building toward cryptographic verification of AI and autonomous system outputs: the capability that lets organizations prove what their systems produced, under defined conditions, to authorized parties, without exposing the operation.
45
Last week, CISA and the G7 Cyber Security Working Group issued a joint quantum advisory, naming harvest-now-decrypt-later (HNDL) as a present-tense threat, not a future one. 7 governments and the US infrastructure security agency publishing the same advisory in the same week is a coordinated signal to procurement committees and board risk registers. The question is whether your cryptographic exposure is mapped before the next board cycle, or after it.
1
3
850
Mapping your cryptographic exposure is the first step. It commits you to nothing. Get your instant result in 5 mins: bit.ly/QuantumRiskCheck
2
176
CNSA 2.0 requires all new US national security acquisitions to be quantum-resistant by January 2027. That's 4 months. Last week, at the INSA/AFCEA Intelligence & National Security Summit, CISA's quantum security lead confirmed it plainly: adversaries are harvesting encrypted data today. Cryptographic exposure is a present-tense risk. The first step is knowing where you stand. That's the only one that commits you to nothing. Take this free Quantum Risk Check bit.ly/QuantumRiskCheck to get a defensible view of where your organization's exposure sits. The result is instant and it only takes 5 mins.
1
5
873
Horizen Labs retweeted
Each proof submitted to zkVerify is verified on-chain. The total continues to climb. 50 MILLION 🔜
4
18
2,843
Horizen Labs retweeted
The past week centered on one thing going live and everything that stands behind it. $ZEN staking is active on Horizen Mainnet, and most of what we published answered the fair questions that follow a launch like this. Here is how it came together. A 🧵...
4
8
46
8,211
Here is a phased roadmap for migrating @horizenglobal to quantum-resistant cryptography that we published last week. By Tommaso Gagliardoni, our Cryptography and Quantum Security Lead. this part 1 explainer covers the Horizen chain and its ecosystem: bit.ly/3R8djlL
Most quantum security guidance treats HNDL as the only urgent threat and puts signature migration on the back burner. For infrastructure whose security rests on attestations and consensus signatures, that framing is backwards. In Part 1 of a new blog series, Tommaso Gagliardoni, our Cryptography and Quantum Security Lead, lays out Horizen Labs' roadmap for migrating @Horizenglobal to quantum-resistant cryptography.
1
4
11
1,848
The core principle: @horizenglobal is a downstream consumer of upstream infra, not a producer of it. The article classifies every surface: what we fix ourselves vs what we track upstream, whether it's Harvest-Now-Decrypt-Later or Trust-Now-Forge-Later, and where a dependency could slip, the roadmap says so.
1
5
317