Organizations get quantum-resistant zero trust as IonQ buys Elisity for $1.3B

IonQ announced on Monday that it has signed a definitive agreement to acquire zero-trust security vendor Elisity in an all-stock transaction valued at up to $1.3 billion. The deal merges Elisity’s enterprise access control software with IonQ’s expanding portfolio of quantum computing and post-quantum cryptography (PQC) solutions. Up to $150 million of the total value is structured as earnout consideration, which depends on how Elisity’s business performs after the acquisition.

How it unfolded

• IonQ and Elisity signed the acquisition agreement on Monday, with IonQ CEO Niccolo de Masi stating that "Q-Day is coming much faster than predicted."
• The transaction is structured as an all-stock deal, with the number of shares issued based on IonQ’s volume-weighted average price over 20 trading days before closing.
• IonQ expects to finalize the acquisition in the fourth quarter of 2026, with Elisity CEO James Winebrenner and his management team remaining in charge of the business.

Who is affected

The acquisition impacts organizations relying on Elisity’s software to restrict network communication between users, devices, workloads, and AI agents based on least-privilege policies. According to SecurityWeek, Elisity has more than 100 customer deployments and raised more than $70 million since its founding in 2019. CyberScoop reports that Elisity says revenue and customer counts have doubled year over year, with no churn among deployed customers. The deal also affects enterprise and government buyers who will now have a combined vendor for identity-driven access controls and quantum-resistant encryption.

IonQ plans to leverage Elisity’s relationships with CISOs to sell its quantum computing products and PQC technologies more broadly. The companies intend to integrate cryptographic inventory and risk data into Elisity’s IdentityGraph component. This integration aims to help organizations prioritize post-quantum upgrades by weighing business risk against the criticality of affected operations. IonQ already offers PQC and quantum key distribution (QKD), which are designed to replace encryption vulnerable to future quantum decryption.

Our take on the response

The merger addresses a two-front security challenge: conventional machine-speed attacks and the "harvest now, decrypt later" risk where encrypted data is stolen for future quantum decryption. Elisity CEO James Winebrenner noted that customers need to contain current attacks while preparing for quantum risk. IonQ cited recent White House executive orders that push federal agencies to adopt PQC sooner, with the Trump administration moving migration timelines from 2035 to 2030. That suggests enterprises may face accelerated pressure to modernize their cryptographic infrastructure.

What to do and how to stay safe: IonQ

• Inventory all systems using public-key encryption to identify assets vulnerable to future quantum decryption.
• Review current zero-trust policies to ensure they account for AI agents and non-human identities in network access decisions.
• Monitor vendor announcements regarding post-quantum cryptography updates and plan migration timelines before 2030 if subject to federal mandates.
• Assess whether current access control tools can integrate with cryptographic risk data to prioritize remediation efforts.

Step-by-step guide: How Smartphone Security Updates Work: The Hidden Chain

General security guidance from the Patch Observer newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

When will the IonQ acquisition of Elisity be completed?

IonQ expects to complete the acquisition in the fourth quarter of 2026.

How much is the deal worth?

The all-stock transaction is valued at up to $1.3 billion, including up to $150 million in earnout consideration.

What technology does Elisity provide?

Elisity sells software that restricts network communication for users, devices, workloads, and AI agents based on least-privilege policies.