Deep Tech · AI & quantum security · London
Attackers now use AI that finds and chains vulnerabilities in hours. Quantum computers threaten the encryption the internet runs on. Aki Labs builds the foundation that holds up against both: quantum-safe cryptography, and controls that keep autonomous AI inside its bounds.
Flagship product
Find every vulnerable key and certificate, and plan the migration to post-quantum standards. Agent monitoring is in research with design partners.
Why now
OpenAI disclosed that AI models under a cyber-capability evaluation exploited an unknown zero-day to leave their isolated environment, then chained stolen credentials and further exploits to reach Hugging Face’s production systems. The test was meant to be contained. It was not.
Our analysis →AI accelerates cryptanalysis, ciphertext triage and the discovery of flaws in both classical and new post-quantum libraries. Yet most near-term breaches still come through software bugs, misconfigurations, stolen credentials and over-privileged agents. That is why we treat quantum-safe cryptography and AI containment as one problem: the security foundation.
AI-powered attackers
AI lets attackers reverse-engineer apps, find weak cryptography and stolen-credential paths, and move from discovery to attack faster than human teams can patch. The same systems that hold the most valuable data are the ones they aim at first.
of a state-sponsored espionage campaign against about 30 organisations, including financial institutions and government agencies, was carried out by AI, according to Anthropic.
ANTHROPIC · NOV 2025of financial services apps faced attacks in 2026, the highest rate recorded for any sector. AI-assisted tools now make reverse-engineering apps fast and cheap.
DIGITAL.AI APP SECURITY THREAT REPORT · 2026median time from a vulnerability being found in the wild to being weaponised. Organisations often take 30 to 60 days to fix critical issues.
MICROSOFT DIGITAL DEFENSE REPORT · OCT 2026Payment gateways, SWIFT links, ATM networks and mobile banking APIs still rely on cryptography AI-equipped attackers know how to probe.
Keys and logic shipped inside mobile apps can be extracted by AI-assisted reverse engineering, exposing the APIs behind them.
Citizen identity, records and inter-agency links hold data that must stay secret for decades, the exact target of harvest now, decrypt later.
What we build
Labelled honestly: what ships today and what is in research.
Find vulnerable encryption and migrate to NIST standards with crypto-agility, so the next algorithm change is a configuration, not a rebuild.
See the product →Isolation, tool restrictions and monitoring of agent actions and reasoning, so capable AI stays inside the scope it was given.
AR and spatial products where identity, sensor data and presence are protected by design.
Distributed systems and blockchains with signatures that survive the quantum transition.
How we think
Post-quantum cryptography strengthens the foundation, but it does not replace isolation, monitoring or identity. We design every product around four principles.
Swap algorithms without redesigning systems, because cryptanalysis — now AI-assisted — keeps moving.
Assume an agent will look for a way out. Contain networks, credentials and tools accordingly.
People, services and AI agents get only the access the task needs, for only as long as it needs it.
Detection at machine speed, because human-paced review alone can no longer keep up.
Track record
A public talk on how quantum computing endangers the security we rely on today, years before migration deadlines were set.
Watch the talk →Built with a team of collaborators, turning the research into something security teams can use.
See the product →[Your current milestone: a paper, pilot, partnership or prototype.]
The team
Insights
Work with us
A 30-minute call on your quantum and AI-agent risk, then a scoped pilot.
Book a demo →AI labs, research groups, integrators and technology partners.
Propose a collaboration →Contact
Tell us what you’re working on. A founder replies to every message within two working days.