Certes launches v7 with quantum-safe edge protection

Certes has launched v7 of its Data Protection and Risk Mitigation platform, extending its post-quantum cryptography protections to edge environments.

The new version is designed to apply data protection and segmentation policies across hybrid, multi-cloud, on-premise and edge systems without requiring application rewrites or changes to underlying infrastructure. Organisations can use the software to secure individual data flows with post-quantum cryptography and rapid key rotation.

The launch comes as businesses grow increasingly concerned about so-called harvest-now, decrypt-later attacks, in which encrypted data is stolen and stored in the expectation that future quantum computers will be able to break current cryptographic methods. v7 is intended to let organisations introduce quantum-safe protections now while retaining the ability to adapt cryptography later.

Certes is positioning the product around a data-centric security model rather than one focused mainly on networks, devices or user identities. The software enforces what Certes describes as cryptographic segmentation on each application flow, aiming to limit lateral movement by attackers if other controls are bypassed.

That approach reflects the spread of computing workloads across cloud platforms, private data centres and edge locations, which can make it harder to apply a single security model consistently. Customer-owned post-quantum keys remain outside the control of cloud providers and third parties, a feature the company links to data sovereignty requirements.

Paul German, Chief Executive Officer, Certes, said: "For too long, cybersecurity has focused on protecting infrastructure and identities, yet attackers continue to bypass those controls. The reality is that organizations must now assume breaches will occur and focus on protecting the data itself. v7 gives organizations the ability to safeguard their most sensitive information wherever it resides, using quantum-safe data protection and strict communication controls that prevent attackers from moving through the environment or exploiting stolen data. Importantly, this can be achieved with zero application rewrites or refactoring, enabling organizations to apply quantum-safe protection to legacy applications that cannot easily be upgraded. It gives business leaders confidence that even in the event of a breach, their data remains secure and their operational and regulatory risk is significantly reduced."

Edge focus

A central element of the update is the extension of protection to the edge, where workloads and devices often sit outside traditional perimeter defences. Certes argues that virtual private networks, firewalls and endpoint detection tools are often designed to protect systems and identities, while attackers increasingly use stolen credentials to move across environments and extract data.

Simon Pamplin, Chief Technology Officer, Certes, said: "Traditional security controls do less than half the job because they focus on defending the network rather than the data. v7 brings quantum-safe, per-flow encryption and segmentation directly to the endpoint, ensuring that even if attackers get in, they cannot move freely or turn stolen data into something usable. v7 also reinforces data sovereignty. Customer‐owned post‐quantum keys are never visible to cloud providers or third parties, giving organizations demonstrable control over who can decrypt sensitive data, and where - whether workloads run in AWS, Azure, GCP, Oracle, private data centers or at the edge. This is about containing breaches and removing the financial, operational, and regulatory fallout that follows."

The platform can also be used to protect data moving into and out of artificial intelligence systems, including training data, prompts and model interactions processed across hybrid cloud setups. That places the product within the wider market discussion about securing data used by AI tools as businesses spread workloads across multiple environments.

Deployment claims

Certes says v7 can be deployed in days rather than months because it does not require application refactoring or infrastructure redesign. Policies can be defined centrally and enforced automatically across endpoints, including information technology systems, operational technology and cloud environments.

The commercial pitch is aimed at boards, Chief Information Security Officers and risk leaders weighing the cost of modernising cyber defences against the operational disruption that often comes with large security projects. The software is intended to reduce the impact of breaches by shrinking the area an attacker can reach and making stolen data unusable.

Dan Panesar, Chief Revenue Officer, Certes, said: "With v7 we help boards and CISOs move to quantum‐safe data protection in weeks, not years, without refactoring applications, redesigning networks and infrastructure, or grinding operations to a halt. You get one simple, central way to protect data across any application, on any infrastructure, in any location, whether on‐prem, in the cloud, or at the edge, so security teams spend less time firefighting and more time protecting the business. When a breach happens, and it will, v7 shrinks the blast radius, stops attackers turning access into impact, and materially reduces cost, downtime, and regulatory fallout. We give organizations enforceable sovereign control over their data wherever it lives, so they can meet the toughest residency, privacy, and sovereignty mandates with confidence. And because v7 is built to evolve as regulations and quantum standards mature, customers aren't locked into today's choices; they can adapt over time without touching applications or architectures. This is about protecting what matters, cutting operational drag, and materially reducing financial risk, not funding another science project or propping up yet another 'visibility' dashboard in security."

The new version is available immediately through Certes' existing Data Protection and Risk Mitigation platform, which the company says is used by more than 1,000 customers globally.