๐ Category 1: Implementation/Integration Layer
PQShield (Oxford, UK)ย
Founded in 2018, raised $65M total, currently ~95 employees
What they do:
- Develop quantum-safe cryptography for chips, applications, and cloud
- SDK for developers to integrate PQ crypto
- Customers include AMD, Microchip, Collins Aerospace, Lattice Semiconductor
Key learnings:
- Co-authored NIST PQC standards, giving them instant credibility
- Claims to have UK's highest concentration of cryptography PhDs outside academia
- Started with $7M seed (2020), then $20M Series A (2022), $37M Series B (2024)
- Launched world's first functional silicon test chip for PQC in September 2024
Your takeaway: Deep expertise + standards participation + practical tools = credibility
ISARA Corporation (Waterloo, Canada)
Founded in 2015, raised $21.5M total ($11.5M initial + $10M Series A)
What they do:
- Quantum-safe cryptographic libraries and integration tools
- ISARA Catalyst allows multiple cryptographic algorithms in a single certificate for easy switching
- Focus on PKI migration tools
Key learnings:
- Founding team were BlackBerry veterans with existing enterprise relationships
- Crossed into revenue within first 1.5 years through consulting
- Team of ~40-50 people described as a "grown-up startup"
- Leadership role in ETSI standards development gave them credibility
Your takeaway: Enterprise relationships + consulting revenue early + migration focus
๐ฏ Category 2: Specialized Applications (IoT Focus)
Crypto Quantique (London, UK)
Founded in 2016, raised $8M total, ~45 employees
What they do:
- Quantum-driven silicon IP (hardware) + QuarkLink IoT security platform (software)
- First to market with NIST-compliant PQC for IoT in 2022
- Partner with STMicroelectronics, Microchip, Renesas
Key learnings:
- Founded by PhD experts (CEO has PhD in PQC, CTO PhD in Engineering)
- Collaborated with ETH Zurich on KEM-TLS protocol development
- Focused on chip-to-cloud security for IoT
- Claim 10X reduction in time/cost for implementing IoT security
Your takeaway: Vertical specialization (IoT) + hardware + software integration
๐ Startup Size Comparison
| Company | Founded | Total Funding | Team Size | Focus |
|---|---|---|---|---|
| PQShield | 2018 | $65M | ~95 | Full-stack PQC tools |
| ISARA | 2015 | $21.5M | 40-50 | PKI migration tools |
| Crypto Quantique | 2016 | $8M | ~45 | IoT-specific |
๐ฏ What 5-Person Startups Are Actually Doing:
Based on the landscape, here's what's realistic for a small team:
Option A: Developer Tools Layer
- Build easy-to-use SDKs for specific frameworks (e.g., "PQCrypto for Python developers")
- Create testing/validation tools for PQC implementations
- Migration assessment tools (like QryptoCyber's CBOM approach)
Option B: Vertical-Specific Solutions
- Healthcare: HIPAA-compliant PQC for medical devices
- Finance: PQC for payment terminals (partner with hardware makers)
- Automotive: Focus on connected car security
Option C: Integration Services
- Start with consulting (like ISARA did) to generate early revenue
- Build migration toolkits as you solve client problems
- Package your learnings into products
๐ก Key Success Patterns:
- Academic/Research Credentials - Every successful company has PhDs or NIST involvement
- Early Revenue Through Consulting - Don't wait to launch a product
- Partnership Strategy - PQShield, Crypto Quantique partnered with chip makers early
- Vertical Focus - The smaller companies won by focusing (IoT, PKI, etc.)
- Standards Participation - Being part of NIST/ETSI gives instant credibility
๐ Realistic 5-Person Startup Path:
Year 1:
- Pick ONE vertical (e.g., IoT device makers)
- Offer consulting + migration assessments
- Build minimal SDK/toolkit for that vertical
- Target: $200K-500K revenue through services
Year 2:
- Refine product based on consulting learnings
- Seed round ($1-3M) like Crypto Quantique's early stage
- Hire to 10-15 people
- Focus on 5-10 design partners
Year 3:
- Series A ($5-10M)
- Expand to adjacent verticals
- Team to 20-30 people