IonQ signs agreement to buy zero-trust firm Elisity, combining quantum computing with least-privilege access controls.
Key points
- The all-stock transaction is valued at up to $1.3 billion, with $150 million in earnouts.
- Elisity’s IdentityGraph component will integrate cryptographic risk data to guide PQC upgrades.
- IonQ expects to close the acquisition in the fourth quarter of 2026.
IonQ has signed a definitive agreement to acquire zero-trust security vendor Elisity. The deal values the California-based startup at up to $1.3 billion in an all-stock transaction.
What happened
IonQ announced on Monday that it will purchase Elisity, a firm founded in 2019 that provides least-privilege access controls. According to SecurityWeek, the total value reaches $1.3 billion, with up to $150 million contingent on Elisity’s future business performance. The number of IonQ shares issued will depend on the company’s volume-weighted average price over 20 trading days before closing, kept between $33.07 and $49.61. IonQ expects to complete the acquisition in the fourth quarter of 2026.
Elisity currently has more than 100 customer deployments and has raised more than $70 million. Its software restricts network communication for users, devices, workloads, and AI agents based on policy. The company’s IdentityGraph component combines data from partner tools, including identity and asset details, to guide access decisions. Upon completion, Elisity CEO James Winebrenner and the existing management team will remain in charge of the business unit.
Why it matters
IonQ plans to use Elisity’s customer relationships to expand its quantum computing and security portfolio. The company already offers post-quantum cryptography (PQC) and quantum key distribution (QKD). According to CyberScoop, the combination addresses conventional attacks and the risk of "harvest now, decrypt later" scenarios.
IonQ Chairman Niccolo de Masi stated that "Q-Day is coming much faster than predicted," referring to when quantum computers could break current encryption. The two companies plan to add cryptographic inventory and risk data to IdentityGraph. This integration aims to help organizations prioritize post-quantum upgrades by weighing business risk and operational criticality. Recent White House executive orders have pushed federal agencies to adopt PQC sooner, accelerating industry timelines.
The fix
- Review current access control policies to ensure they align with least-privilege principles.
- Inventory cryptographic assets to identify systems requiring post-quantum upgrades.
- Monitor vendor announcements for integration updates between access control and crypto tools.
What to do and how to stay safe: IonQ
- Audit your organization's network access policies to ensure they restrict communication based on least-privilege rules.
- Catalog all systems using public-key encryption to prepare for future post-quantum cryptography migrations.
- Monitor official government guidance for updated timelines on adopting quantum-resistant encryption standards.
- Evaluate whether your current security tools can integrate identity data with cryptographic risk assessments.
Step-by-step guide: What is password policies and how they protect systems
General security guidance from the Crypt Weekly newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
When is IonQ expected to complete the acquisition of Elisity?
IonQ expects to complete the acquisition in the fourth quarter of 2026, according to the announcement.
How much is the deal worth?
The all-stock transaction is valued at up to $1.3 billion, with $150 million in earnout consideration.
What is the role of Elisity's IdentityGraph in this deal?
IdentityGraph will combine identity and risk data with cryptographic inventory to help prioritize post-quantum upgrades.
