TECHNOLOGY
Technology Ecosystem
No rip and replace.
We don't sell boxes. We deploy proven, integrated technology through an ecosystem of platform, infrastructure, and OEM partners.
TECHNOLOGY
We don't sell boxes. We deploy proven, integrated technology through an ecosystem of platform, infrastructure, and OEM partners.
THE DUAL THREAT
Quantum computing threatens the encryption that protects data in motion. AI threatens the data itself, wherever it sits and whoever can reach it. Fabric's ecosystem is organized around the three places your data lives: in design, in transport, and at rest.
DATA IN DESIGN
Encryption Intelligence inventories every certificate, key and cipher before a single change is made. The SKA-Platform and NetworkSecure then deliver quantum-safe keys into the firewalls and VPNs you already run, so security is designed in, not bolted on. Delivered by Fabric and vendor agnostic by design: Fortinet, Juniper, Cisco, Palo Alto Networks and Ciena are examples of the platforms we work with, not the limit.
See quantum-safe network hardening →DATA IN TRANSPORT
Fabric is developing a quantum-secure carrier transport layer designed to carry secured traffic regardless of the originating medium: host mobile, fibre or satellite. It is at the development stage and disclosed as such; the design goal is that protection never ends at the network edge. Canadian, Calgary based, designed for Canadian data sovereignty and the federal, defence and critical infrastructure buyers who require it.
DATA AT REST
For data at rest, Fabric works with a sovereign storage approach that encrypts data on the device with per file keys wrapped in post-quantum protection (ML-KEM-1024, ML-DSA-87), then disperses the shards across multiple providers so no single party can seize or read a dataset. AI training and inference run only inside your boundary. Canadian, built for PIPEDA and the CLOUD Act.
PLATFORM CORE
The SKA-Platform is the quantum-safe symmetric key agreement engine at the core of every Fabric Networks engagement. The platform is developed by Arqit Quantum Inc. Fabric licenses it as a Private Instance, hosts and operates it in Canada, and does the work around it: the cryptographic inventory, the architecture, the integration with the firewalls and routers you already run, and the ongoing governance. Every encryption key is generated on demand, never stored, and never transmitted, which eliminates the key distribution problem that makes traditional encryption vulnerable to quantum attack.
PLATFORM CAPABILITIES
SKA-Platform™ for quantum-safe symmetric key agreement
NetworkSecure™ for IPsec VPN quantum-safe hardening
Encryption Intelligence for cryptographic discovery and audit
Cloud-hosted and on-premise deployment options
NSA CSfC compliant · FIPS 140-3 validated · NIST PQC aligned
INFRASTRUCTURE PARTNERS
Fabric deploys SKA nodes and network edge points in carrier neutral colocation and interconnection facilities. With global metro coverage, this positions quantum-safe infrastructure at the network edge, close to where data moves between enterprises, clouds and carriers.
Integration: Colocation for SKA Controller nodes · Cloud Connect for hybrid quantum-safe connectivity · Interconnection fabric for carrier and enterprise peering
Fabric Networks plans, costs, builds and operates fibre networks on a fibre infrastructure intelligence platform. GIS route planning, estimating, procurement, construction control and financial reporting live in one project environment, and Fabric layers quantum-safe encryption and monitoring onto the finished network.
Integration: GIS route intelligence · Estimating and cost codes · Bill of materials and supplier catalogs · Permits, crews and equipment · Commitment accounting and portfolio reporting
FIBRE INFRASTRUCTURE INTELLIGENCE
Security is only half of what we run. For fibre builds and network operations, Fabric Networks works on a fibre infrastructure intelligence platform: six capability groups covering the full lifecycle from route planning and estimating to procurement, construction and financial control, all on one source of truth. The route connects to the estimate, the estimate to materials, materials to procurement, procurement to construction, and construction to financial performance.
Plan fibre routes with cable types and deployment methods, identify crossings and infrastructure features, and manage spatial project data on an interactive map with layer groups, WMS/WFS base maps, shapefile import and CAD-style print layouts.
Build estimates across materials, labour, equipment and construction methods. Apply supplier costs and markups, assign standardized cost codes to every line, and track change orders as scope evolves.
Develop project material requirements, manage catalogs and suppliers with lead times, track inventory and procurement status, and turn requirements into purchasing intelligence. Stock deducts automatically as the route is designed.
Manage equipment rentals with availability awareness, track labour resources and skill levels, and allocate crews and equipment across active projects with drag and drop scheduling.
Coordinate tasks, milestones and crew schedules. Manage permits with expiry alerts, project documents and construction activity, with a change request approval workflow that keeps the right sign off on every change.
Track budgets, committed costs and actuals in a three way commitment accounting flow. Tag every line with cost codes, forecast revenue, generate branded invoices and report across the whole project portfolio.
Built for network owners, fibre contractors, engineering teams, project managers, Indigenous communities and organizations, and the governments and funders who oversee them. Every organization gets its own secure workspace with role based permissions, invite only access and a controlled change and approval trail. And because Fabric Networks runs the security practice too, every network we build on it is quantum-safe from the first splice.
OEM INTEGRATIONS
Quantum-safe encryption layers onto your existing network infrastructure. Fabric Networks integrates with the firewall and routing platforms you already operate. No rip and replace required. We harden what you have.
Fortinet is a Fabric Networks partner and the security platform most of the operators we advise already run. NetworkSecure is a Fortinet Fabric-Ready validated integration that delivers quantum-safe symmetric keys into existing FortiGate IPsec tunnels without replacing hardware. Fabric brings the two together: the FortiGate stays, the policy stays, and the key exchange underneath it stops being quantum vulnerable.
Integration: FortiGate NGFW (Entry through Ultra-High-End) · FortiManager policy orchestration · FortiAnalyzer SIEM export
Read the Fortinet partner profile →NetworkSecure integrates with Juniper SRX Series firewalls and vSRX virtual appliances, enabling quantum-safe VPN hardening across Juniper-based network infrastructure.
Integration: SRX Series hardware firewalls · vSRX virtual firewalls · NFX Series network services platforms
Juniper integration →A SKIP-compatible integration extends quantum-safe key agreement to Cisco network infrastructure, so enterprises with Cisco-based environments can add quantum-safe encryption without architectural changes.
Integration: SKIP-compatible devices · IPsec VPN quantum-safe enhancement
Cisco integration →Intel provides hardware-level encryption acceleration and confidential computing capabilities that complement software-defined quantum-safe encryption. Intel TDX enables secure data-in-use protection alongside data-in-transit encryption.
Integration: Intel TDX Confidential Computing · Hardware encryption acceleration · SmartNIC integration for high-throughput environments
Intel platform →WHAT THE PLATFORM BRINGS
Fabric Networks architects and deploys the quantum-safe platform. These are the capabilities we design around.
ENCRYPTION INTELLIGENCE
A complete cryptographic inventory across cloud, network, endpoints, OT, and legacy systems, with weaknesses pinpointed and a PQC aligned migration plan that keeps updating as the estate changes.
POST-QUANTUM CRYPTOGRAPHY
A hybrid, standards aligned approach: NIST ML-KEM alongside symmetric key agreement, so long lived data is protected now and you keep crypto agility as standards evolve.
DATA SOVEREIGNTY
Encryption keys stay under your control even when workloads run in the cloud, with end to end encryption between trust domains. Paired with Canadian colocation, that is a sovereign data path.
CONFIDENTIAL COMPUTING
NetworkSecure can run inside Intel TDX trust domains, generating and rotating keys inside the enclave so data stays confidential in use and in transit, even on shared infrastructure.
5G AND CARRIER NETWORKS
Quantum-safe, zero trust backhaul encryption with high frequency key rotation and no PKI dependency, deployable without downtime. The basis of our SKA Central Controller carrier work.
OPEN INTERFACES
Works with FortiGate, Juniper SRX, Cisco SKIP, Palo Alto Networks, strongSwan and Ciena optical encryption through ETSI 014, SKIP and vici key interfaces, so your existing hardware stays in service. These are examples, not an exclusive list: any platform that supports an open key interface is in scope.
STANDARDS AND VALIDATION
The validations below belong to Arqit's platform, which Fabric Networks deploys and operates in Canada. Arqit's consultancy assurance is from the UK NCSC; it is not a Canadian or US government credential. Fabric maps the platform's outputs onto the Canadian and NIST frameworks that apply to your organization. Public demonstrations of the platform by other operators are recorded in the Library, marked as demonstrations, not as Fabric deliverables.
FIPS 140-3 validated cryptographic module
ISO 27001 certified information security management
UK NCSC Assured Cyber Security Consultancy, Post-Quantum Cryptography
NIST ML-KEM (FIPS 203) with hybrid key establishment
RFC 8784 pre-shared keys in IKEv2, per NIST SP 800-77
NSA CSfC Symmetric Key Management Annex alignment
US NSM-10 quantum-safe symmetric key requirements
Canadian Cyber Centre ITSM.40.001 and ITSAP.00.017 mapping by Fabric
Every engagement begins with Encryption Intelligence, a full cryptographic audit of your existing infrastructure. We map what you have, identify what's vulnerable, and deliver a migration roadmap that works with your technology stack and your timeline.
Request AssessmentTECHNICAL QUESTIONS
Post-quantum public key algorithms such as ML-KEM replace RSA and elliptic curve exchanges with lattice mathematics believed to resist quantum attack. Symmetric key agreement avoids the public key exchange altogether: both endpoints derive an identical AES-256 key from shared, continually refreshed material, so there is no key in transit to harvest. The SKA-Platform Fabric operates takes the second approach and can run alongside ML-KEM hybrid exchanges where they exist.
Fortinet FortiGate (Fortinet Fabric-Ready validated), Juniper SRX, Cisco (via a SKIP compatible integration), Palo Alto Networks, strongSwan and Ciena optical encryption, among others. Keys are delivered into the existing IPsec tunnels or optical encryptors; routing, policy and hardware are unchanged. We are vendor agnostic, and the names here are examples rather than a complete list.
Fabric operates the SKA-Platform under a Private Instance licence on Canadian hosted infrastructure in carrier neutral colocation. Keys are generated on demand at the endpoints from shared material, are never stored centrally and are never transmitted, so key material stays inside a Canadian controlled boundary. Fabric does not claim any Government of Canada or DND approval of the platform.
Yes. Probes are passive and observe traffic at monitoring points, so they can sit on OT segments without introducing agents or active scanning. The inventory covers IT and OT flows together, which is where most operators find the surprises.
NIST FIPS 203, 204 and 205 and the NIST PQC migration guidance, US NSM-10, CNSA 2.0 where defence relevance applies, and the Canadian Centre for Cyber Security's ITSM.40.001 roadmap and ITSAP.00.017 guidance. The platform's own validations are from the UK NCSC; Fabric maps its outputs onto the Canadian and NIST frameworks that apply to you.
Transport is where Fabric starts because that is where harvest now, decrypt later happens. For data at rest Fabric works with a sovereign storage approach that encrypts on the device with per file keys wrapped in post-quantum protection and disperses shards across providers, built for PIPEDA and the CLOUD Act. It is described on this page and offered where a customer's roadmap calls for it.