Post-quantum encryption for data at rest. Start free, pay per person as you grow, or talk to us about your whole organization.
For trying post-quantum encryption on your own files.
Not a trial. No time limit.
For one professional protecting work files.
or $290 a year
Billed yearly. You save $58.
For teams that handle regulated or client data.
or $490 per user a year
Billed yearly. You save $98 per user.
For organizations and agencies that need one contract.
Pricing depends on scope.
Prices in US dollars, excluding tax. Tax is added at checkout. Business is priced per user; for a team on one bill, contact us.
Swipe sideways to see every plan.
| Feature | Free$0 | Pro$29 a month | Business$49 per user a month | EnterpriseDepends on scope |
|---|---|---|---|---|
| License and limits | ||||
| Who can use it | Personal use only | Personal and commercial | Commercial, per user | Whole organization |
| Devices per user | 3 | 5 | 5 | By contract |
| File size | No limit with ML-KEM-512 | No limit up to ML-KEM-768, 25 GB with ML-KEM-1024 | No limit | No limit |
| Unlimited use, no metering | Included | Included | Included | Included |
| Encryption | ||||
| ML-KEM + X25519 hybrid (FIPS 203) | ML-KEM-512 | 512, 768, 1024 | 512, 768, 1024 | 512, 768, 1024 |
| AES-256-GCM and XChaCha20-Poly1305 | Included | Included | Included | Included |
| HQC + X25519 hybrid (not yet a NIST standard) | Not included | Not included | Included | Included |
| Pure post-quantum mode, no classical hybrid | Not included | Not included | Included | Included |
| Signatures | ||||
| ML-DSA (FIPS 204) | ML-DSA-44 | 44, 65, 87 | 44, 65, 87 | 44, 65, 87 |
| SLH-DSA (FIPS 205) | Not included | Included | Included | Included |
| Hybrid signatures, ML-DSA + Ed25519 | Not included | Included | Included | Included |
| FN-DSA (Falcon, pre-standard), with Ed25519 hybrid | Not included | Not included | Included | Included |
| LMS stateful signatures (SP 800-208) | Not included | Not included | Included | Included |
| Everyday tools | ||||
| Encrypt, decrypt, sign, verify, hash, shred | Included | Included | Included | Included |
| PQC scan with CBOM report | Included | Included | Included | Included |
| Desktop app, command line, terminal app and MCP server | Included | Included | Included | Included |
| Compression (zstd) | Included | Included | Included | Included |
| Memory protection | Included | Included | Included | Included |
| Network lock during operations (Linux command line) | Included | Included | Included | Included |
| Works offline up to 7 days after a license check | Included | Included | Included | Included |
| Password hashing memory (Argon2id) | 128 MB | Up to 256 MB | Up to 512 MB | Up to 512 MB |
| Pro tools | ||||
| Batch encrypt and decrypt | Not included | Included | Included | Included |
| Password change (rekey) | Not included | Included | Included | Included |
| Encrypted password vault | Not included | Included | Included | Included |
| Audit log (hash chain) | Not included | Included | Included | Included |
| Key import and export | Not included | Included | Included | Included |
| Triple-format files (JPEG + ZIP + PDF) | Not included | Included | Included | Included |
| Self-extracting files (.sh, .bat) | Not included | Included | Included | Included |
| Tripwire URL (canary token in a PNG) | Not included | Included | Included | Included |
| Key from any file (keyfile) | Not included | Included | Included | Included |
| Attribute-based encryption | Not included | Included | Included | Included |
| Team and security controls | ||||
| Organizations, members and roles | Not included | Not included | Included | Included |
| Single sign-on (OIDC) | Not included | Not included | Included | Included |
| Magic-link onboarding and command-line device sign-in | Not included | Not included | Included | Included |
| Signed encryption policy, enforced on every device | Not included | Not included | Included | Included |
| Per-organization audit log | Not included | Not included | Included | Included |
| Key escrow and recovery | Not included | Not included | Included | Included |
| Threshold encryption (M-of-N approvals) | Not included | Not included | Included | Included |
| Shamir secret sharing | Not included | Not included | Included | Included |
| Recipient groups and encryption policy | Not included | Not included | Included | Included |
| SIEM export (CEF, JSON, Syslog) | Not included | Not included | Included | Included |
| Business tools | ||||
| Bulk migration of the files the scan finds | Not included | Not included | Included | Included |
| Time-lock encryption | Not included | Not included | Included | Included |
| Steganography | Not included | Not included | Included | Included |
| Deniable encryption | Not included | Not included | Included | Included |
| Dual-format polyglot files | Not included | Not included | Included | Included |
| Custom company watermark | Not included | Not included | Included | Included |
| Compliance documentation package, on request | Not included | Not included | Included | Included |
| Government builds | ||||
| Approved-mode build (FIPS 140-3 preparation), not yet released | Not included | Not included | Not included | By proposal |
| CNSA 2.0 build for defense, not yet released | Not included | Not included | Not included | By proposal |
| Support and terms | ||||
| Support | Documentation | Priority email, 24-hour response | Signed SLA | |
| Guided onboarding | Not included | Not included | Not included | Included |
| Named contact | Not included | Not included | Not included | Included |
| Quarterly readiness review (4 hours) | Not included | Not included | Not included | Included |
| Cancel anytime, access until the paid period ends | Nothing to cancel | Included | Included | Per contract |
Site and archive-server licenses, readiness assessments, migration services, and the approved-mode and CNSA 2.0 builds for agencies and defense. Pricing depends on scope.
Planned, for products that call QNSQY from their own code. It is not available yet: these are planned prices, and there is no release date. Today, automate QNSQY with its command line or MCP server on any plan above; those plans are never metered.
| Plan | Price | Credits a month | Extra credits |
|---|---|---|---|
| Starter | $29 a month | 10,000 | $0.005 each |
| Growth | $99 a month | 100,000 | $0.003 each |
| Scale | $499 a month | 1,000,000 | $0.001 each |
One credit per operation, or one per started gigabyte for larger files. ML-KEM-512, ML-DSA-44, decrypt, verify, hash and key generation never use credits. Developer API status.
Each person who uses QNSQY at work needs their own Business subscription, on up to 5 devices. For a team on one bill, with single sign-on and an organization admin, contact us: we set up your organization at the same price per user. Enterprise covers a whole organization under one contract.
Yes. Free, Pro and Business are flat-fee: every algorithm your plan includes is unlimited, with no credits and no metering. Credits apply only to the developer API.
No. Prices are in US dollars and exclude tax. Sales tax or VAT, where it applies, is calculated and added at checkout.
Yes. Cancel with one email, no questions asked. You keep access until the end of the period you paid for. After that QNSQY works as Free; see the next question for what that means for your files.
In the current release, each file records the plan of the account that made it, and QNSQY opens it only on that plan or a higher one: a file made on Pro opens on Pro or Business, a file made on Business only on Business, and a file made on Free, or while signed out, on every plan. So when a paid plan ends, the files you made on it cannot be opened until you renew. QNSQY does not delete or change them. Before a plan ends, decrypt the files you will still need. If they must stay encrypted, encrypt them again while signed out, which uses the Free algorithms.
Cards and PayPal at checkout, through Lemon Squeezy, which also handles sales tax and VAT. Enterprise and government contracts are paid on the terms in the contract.
No. Free has no time limit. It covers personal use with ML-KEM-512 and ML-DSA-44, with no file-size limit on the command line.
No. The limits on this page are the command line's. In the current release the desktop app is stricter: it will not encrypt a file over 100 MB on Free or over 25 GB on Pro, whatever the algorithm. For larger files, use the command line.
No. QNSQY is not FIPS 140-3 validated, SOC 2 certified, FedRAMP authorized or HIPAA audited. It implements the post-quantum algorithms NIST standardized in FIPS 203, 204 and 205, and our test results are public on the validation page.
Encrypt your own files with ML-KEM-512 today. Upgrade when you need more.