IonQ Bolsters Cybersecurity with $1.3 Billion Elisity Acquisition

"Q-Day is coming much faster than predicted," IonQ Chairman and CEO Niccolo de Masi warned in a release announcing the deal.

The deal: all-stock acquisition valued at up to $1.3 billion

IonQ on Monday said it will acquire Elisity, a zero-trust network security firm founded in 2019, in an all-stock transaction valued at up to $1.3 billion. The companies expect the transaction to close in the fourth quarter of 2026, subject to regulatory approval. The move folds Elisity’s enterprise access-control capabilities into IonQ’s growing cybersecurity arm.

What Elisity brings: identity, policy and AI-aware access controls

Elisity sells a software policy layer that governs which users, devices, workloads and AI agents can communicate across a network, independent of the underlying network technology. The California-based company reports more than 100 global deployments, says its revenue and customer counts have doubled year over year, and that there has been no churn among deployed customers.

Elisity already treats AI agents and other non-human identities as subjects of access policy. The company has joined the Open Secure AI Alliance and lists priorities that include least-privilege rules for sanctioned agents, containment of agentic threats and control of unsanctioned AI.

Why IonQ is buying a network security firm

Maryland-based IonQ has been assembling a security portfolio built around post-quantum cryptography (PQC) and quantum key distribution (QKD) — technologies intended to replace or supplement current encryption that future quantum computers could weaken. The companies framed the acquisition as addressing a two-front risk: conventional cyberattacks that operate at machine speed, and the risk that encrypted data could be harvested now and decrypted later when quantum decryption becomes practical — a concept the companies call “harvest now, decrypt later.”

Elisity’s planned role is to connect identity data to cryptographic decision-making. Its roadmap would extend its IdentityGraph product with cryptographic inventory and risk information, allowing customers to rank post-quantum upgrades by business risk.

Policy and market context cited by the companies

Both governments and the technology industry have accelerated timelines to adopt post-quantum cryptography, the companies noted. IonQ and Elisity cited a set of influences driving that acceleration: executives in the U.S. quantum sector who believe Chinese scientists and labs have achieved breakthroughs across several quantum-computing fields over the past two years; a recent executive order from the Trump administration directing federal agencies to boost the domestic quantum industry and move up internal timelines for migrating to PQC encryption from 2035 to 2030; and companies such as Google and others opting to move their own migration timelines to 2029.

Elisity CEO James Winebrenner framed the combined pitch succinctly: “Our customers need to contain attacks today, put AI to work safely, and prepare for quantum risk,” he wrote in a blog post announcing the deal.

What this means for technologists, policymakers, and enterprises

• Technologists and security teams: They gain an integrated stack that links identity- and policy-based access control to post-quantum planning tools through Elisity’s IdentityGraph expansion. That promises a way to prioritize PQC upgrades based on business risk rather than a uniform blanket migration.
• Policymakers and regulators: The deal folds a zero-trust operator into a firm publicly committing to PQC and QKD work, arriving as federal guidance and executive direction compress migration timelines. Regulators will be one of the gatekeepers before the companies can close the transaction in Q4 2026.
• Enterprises and procurement leaders: The combined offering is pitched as a dual-response: defending against high-speed conventional attacks and managing the longer-term quantum decryption threat. Elisity’s claim of zero churn among deployed customers and rapid year-over-year growth will be central to procurement narratives.

The acquisition is framed as both defensive and anticipatory: defensive because it folds identity-aware policy controls into a security posture that must stop attacks now; anticipatory because it attempts to give customers a way to rank and schedule cryptographic upgrades as quantum risks evolve. The next concrete milestones are regulatory approvals and the companies’ ability to execute on the stated roadmap to weave cryptographic inventory and risk data into IdentityGraph.

Read the original CyberScoop story: https://cyberscoop.com/ionq-acquires-elisity-1-3-billion-quantum-security/