IonQ to Acquire Elisity in Up to $1.3B Quantum Security Deal

Hospital security teams have to preserve care while changing the protections around it. Elisity has built its enterprise business inside that obligation, using identity-based network controls to limit communication without asking the organization to abandon the infrastructure it operates. Its proposed acquisition by IonQ brings a second horizon into that relationship: the cryptography protecting information that may remain sensitive for years.

On October 12, 2026, IonQ announced a definitive agreement to acquire Elisity in an all-stock transaction valued at up to $1.3B, including up to $150M in performance-based earnout opportunity. Closing is expected in Q4 2026, subject to customary conditions and required regulatory approval. The combination would connect an existing enterprise policy business with IonQ's post-quantum cryptography and quantum key distribution capabilities, giving the quantum supplier a more direct relationship with the people who decide how networks change.

What IonQ Is Buying With Elisity

The transaction announcement describes both a security platform and a commercial foothold. IonQ reports more than 100 global Elisity customer deployments and zero churn among deployed customers. Those are company-reported measures; the announcement supplies no absolute target revenue figure from which to calculate an acquisition multiple.

Niccolo de Masi, IonQ's chairman and CEO, is adding a business that already participates in enterprise access decisions. Elisity CEO James Winebrenner is expected to continue leading the company after closing, and the companies intend to preserve its customer and partner relationships. Keeping that operating familiarity matters when the proposed new work involves changing cryptographic dependencies across infrastructure already in use.

Elisity's current leadership page identifies Michal Garcarz as CTO. The technical organization therefore enters this proposed combination with a specific task ahead: carry identity and policy context into the cryptographic inventory and risk information envisioned by the shared roadmap. That integration is a plan, rather than an already delivered capability.

For a buyer, the distinction between owning security technology and owning a route into daily security decisions is consequential. Elisity's installed relationships could help IonQ introduce adjacent protections to customers with an existing deployment experience. The commercial work would still involve showing how those protections fit the customer's systems, budgets and operating priorities.

Why Identity Matters During Cryptographic Change

Elisity's microsegmentation platform combines network observations with identity, endpoint, asset and cloud context. Teams can simulate least-privilege policies, review the effect and enforce them through supported network infrastructure. In plain language, the company helps administrators decide which communications an identity needs, then constrain the rest.

A cryptographic inventory addresses a different question: which protections are in use and where they may need to change. Putting those findings beside an identity record could help a team understand the operating significance of a dependency. A device associated with essential care and a device performing an ordinary office task may demand different migration planning, even when both contain technology that needs attention. This is the practical opportunity in the proposed product relationship.

Post-quantum cryptography concerns algorithms designed to resist attacks from both conventional and sufficiently capable quantum computers. Network access controls concern which identities may communicate. The proposed combination joins those responsibilities; an access policy does not itself replace an encryption algorithm, and a cryptographic upgrade does not determine every legitimate network relationship.

That separation also matters for AI agents. Elisity describes controls on the devices and workloads running agents, enforced through the network outside the agent's runtime. A security team evaluating the acquisition should ask which communications become governable through that approach, alongside the separate work of evaluating an agent's behavior. DevCuration's coverage of runtime AI governance offers a related lens on that operating responsibility.

The Enterprise Business Behind the Quantum Deal

Elisity's earlier financing shows a security company built over several investment cycles. Its June 2021 announcement records a $26M Series A co-led by Two Bear Capital and AllegisCyber Capital, with Atlantic Bridge participating. The same historical release identifies Burjiz Pithawala, Sundher Narayan and Srinivas Sardar as cofounders; their job titles in that release belong to that period.

Insight Partners led a $37M Series B announced April 30, 2024. In January 2025, Elisity disclosed additional investments from TCV and Chevron Technology Ventures, without specifying their amounts. Those disclosures establish institutional backing, while leaving individual investor proceeds and returns in the proposed acquisition unknown.

IonQ arrives from a different institutional history. Founded in 2015 by Chris Monroe and Jungsang Kim, the College Park, Maryland company developed from trapped-ion research into a broader quantum business. Its August 5 financial release reports $80.1M in Q2 2026 GAAP revenue and approximately 25% of quarterly revenue from multiproduct customers. The same release reports a $120.3M adjusted EBITDA loss, a non-GAAP measure.

Elisity would extend that multiproduct sales ambition into an established enterprise security relationship. The earnout makes future Elisity business performance part of the possible consideration, while the all-stock structure makes IonQ equity the payment instrument. Neither feature reveals the economics of a combined product contract, which customers would still evaluate through the work it performs.

A Migration Calendar With Operations Still Running

NIST's post-quantum guidance explains why preparation can begin before anyone can give a reliable arrival date for a cryptographically relevant quantum computer. The agency released its first 3 finalized post-quantum standards in 2024 and encourages organizations to start transitioning. Sensitive information can retain value long enough for an adversary to capture encrypted data now and attempt decryption later.

The migration is therefore an organizational job as well as a technical one. Inventorying a cryptographic dependency starts a conversation with whoever owns the affected application, identity or infrastructure. The proposed IonQ-Elisity relationship puts that conversation beside a platform already used to make access decisions, with the possibility of carrying risk information into the policies governing communications.

Winebrenner's account of the agreement places continuing operations and the partner ecosystem inside the transition plan. That is a useful way for customers to assess the acquisition: through the maintenance of the working relationship they have today and the specific cryptographic work the combined company can help them perform over time.

For the hospital security team, a future cryptographic upgrade will still pass through people responsible for care, devices with operational histories and communications that must remain available. Elisity's customer relationship would give IonQ a place in those decisions, where the quantum roadmap meets the next change the institution can safely make.