Why a Quantum Computing Company Is Paying Up to $1.3 Billion for Network Access Controls
IonQ plans to buy zero-trust firm Elisity in an all-stock deal worth up to $1.3 billion, betting that companies need to contain today’s fast attacks and prepare for quantum-era encryption at the same time. Here is the story behind the deal and what it means for smaller firms.
On the surface it is an odd pairing. IonQ, a Maryland company best known for building quantum computers, announced on Monday that it will acquire Elisity, a California firm that sells network access controls. The price is up to $1.3 billion, paid entirely in stock. Read a little closer, though, and the deal says a lot about where security spending is heading.
Greg Otto reported the announcement for CyberScoop, including comments from Elisity’s chief executive, and our account follows his reporting. Deal terms are from SecurityWeek’s coverage.
What each side brings
Elisity, founded in 2019, makes a software policy layer that decides which users, devices, workloads and AI agents are allowed to talk to each other on a network, regardless of the networking gear underneath. The company says it has more than 100 deployments worldwide, that its revenue and customer count doubled over the past year, and that no deployed customer has left.
IonQ has been assembling a security business around post-quantum cryptography, the new encryption designed to survive future quantum computers, and quantum key distribution. Elisity gives it an established product, plus customer and security-leader relationships it can use to sell those quantum offerings to enterprises and governments, SecurityWeek notes.
Two problems, one pitch
The companies frame the deal around two threats arriving on different clocks. One is here now: attacks that move at machine speed once they get inside a network. The other is “harvest now, decrypt later,” in which encrypted data is stolen and stored until quantum computers can break it. IonQ chief executive Niccolo de Masi put the urgency plainly in the announcement: “Q-Day is coming much faster than predicted,” referring to the point when today’s encryption could be cracked.
Deadlines are already moving. CyberScoop reports that a recent executive order pulled federal agencies’ target for migrating to post-quantum encryption forward from 2035 to 2030, and that Google and other companies have set 2029 for their own migrations.
The CEO’s reality check
Elisity chief executive James Winebrenner told CyberScoop those dates are easier to announce than to meet. His suggested order of work is to identify the information and operations that most need protecting, then map the identities, communications and encryption they depend on. “You won’t replace every legacy system at once,” he said. Instead, organizations should upgrade what they can, test the effects, and tightly limit access to the systems that need more time. Segmentation helps contain attacks, he added, but it does not replace the encryption upgrades themselves.
That is where the combined product is meant to fit. The plan is to add an inventory of encryption in use, and the risk attached to it, to Elisity’s IdentityGraph so customers can rank post-quantum upgrades by business impact.
AI agents enter the access list
The deal also reflects how AI agents are changing network security. Elisity already treats agents and other non-human identities as things that need access rules of their own. Winebrenner said the hardest unsolved problem is keeping an agent’s identity and permissions trustworthy as its task and tools change, and his answer is least privilege down to the individual task: an agent should reach only what that task requires.
What happens next
IonQ expects to close in the fourth quarter of 2026, pending regulatory approval. Up to $150 million of the price is an earnout tied to Elisity’s performance, and Elisity’s management team will keep running the business. By SecurityWeek’s count, it is one of roughly 300 cybersecurity acquisitions so far this year.
What this means for your company
You don’t need quantum products to act on the ideas behind this deal. The first steps are inexpensive and useful today:
- Divide your network. Keep guest Wi-Fi, office PCs, servers, cameras and other devices in separate zones, so one infected machine can’t reach everything.
- Start a simple encryption inventory. Note where your important data lives and what protects it in transit and at rest: VPNs, website certificates, backups and file-sharing tools.
- Ask your key vendors about post-quantum plans, especially for VPNs, firewalls and anything that stores sensitive records long-term.
- Treat AI tools and service accounts as identities. Give each one only the access its job requires, and review it when the job changes.
Need help segmenting your network and planning for the next generation of encryption? Reach out to Layer 7 Data Solutions to discuss how we’ve helped companies similar to yours.
About The Author
