X25519+ML-KEM-768 hybrid in Chrome (default for ~10% of users). Cloud KMS launched FIPS 204/205 quantum-safe digital signatures (Feb 2025). Full PQC migration committed for 2029.
Fortune 1000 adoption
The buyers are named, funded, and deploying — in production.
This is the buyer pool. Every name on this page has either a live PQC program, a 2025 budgeted migration, or a public commitment. The market is not theoretical.
Big Tech · already shipping
Hyperscalers, OS vendors, and CDNs are running hybrid PQC at scale.
Apple
ProductioniOS / iPadOS / macOS 26 ship X25519MLKEM768 by default. PQ3 protocol for iMessage at "Level 3" security. CryptoKit exposes hybrid HPKE + ML-KEM / ML-DSA APIs.
Microsoft
ProductionSymCrypt includes ML-KEM, ML-DSA, SLH-DSA. Hybrid PQC TLS in Windows 11 and Server Insider builds. Azure Key Vault PQC roadmap in flight.
Amazon AWS
ProductionThree-phase PQC migration plan (Dec 2024). KMS, S3, and TLS endpoints rolling out PQC by default. AWS Braket providing broader quantum strategy.
Cloudflare
ProductionPublic 2029 PQC commitment. ~2% of all TLS 1.3 connections now PQC-secured; default in many customer zones.
IBM
Production5,000+ lattice-crypto deployments across Fortune 1000 customers. Quantum-safe cryptography in z16 and z17 mainframes.
Banking & Financial Services · the dominant buyer
The largest vertical buyers are already running PQC production systems.
Qryptonic (June 2025) survey of 147 CISOs: 99% of Fortune 1000 are not yet PQC-ready — but the leaders are showing what a mature deployment looks like.
JPMorgan Chase
LiveBuilt a 100 Gbps Quantum-Secured Crypto-Agile Network (Q-CAN) between two Singapore data centers (45-day stable pilot, +6 ms latency). Dual PQC + QKD remediation strategy. $30M in new AUM attributed to quantum-aware clients.
HSBC
LiveFirst PQC-secured tokenized physical gold trade (Sept 2024, Quantinuum partnership). FCA sandbox approval. 1,000 TPS using Dilithium. First fully PQC-secured digital bond issuance in the EU.
Goldman Sachs
LiveQuantum-Monte-Carlo pricing with QC Ware and IonQ. Dedicated quantum research team led by William Zeng. Options pricing + risk modeling in production pilots.
Citi
LiveCiti Institute forecasts $5.5T tokenized assets by 2030 base case (bull $8T). Stablecoin issuance base $1.9T / bull $4T. Bank-token transaction volume could exceed $100T/year.
BNY Mellon
LiveTokenized deposit infrastructure in production. Projects $3.6T in stablecoins + tokenized cash by 2030. Active tokenized U.S. Treasuries programs.
Deutsche Bundesbank & Banque de France
LiveProject Leap — quantum-safe VPN for test payments. Central-bank-led PQC pilots for cross-border settlement.
Payment networks · spending billions
The biggest cheque-writers in 2025–2026 are Visa, Mastercard, and Stripe.
Mastercard
March 2026: acquired BVNK for $1.8B — the largest stablecoin acquisition ever. Crypto Partner Program with 85+ companies. Integrated USDC, USDG, PYUSD, FIUSD in settlement.
Visa
$3.5B annualized USDC settlement by end of 2025. Live in 40+ countries. Advisory practice with 20+ bank engagements. 130+ stablecoin-linked card programs.
Stripe
Acquired Bridge for $1.1B (Feb 2025). Launched Tempo blockchain + Machine Payments Protocol for AI agents. Processed $1.9T in 2025.
The buyer pool
200+ named Fortune 1000 buyers with funded PQC programs in 2025.
This is not a speculative market. The buyers exist. They have line items. The question is which one acquires the category brand first.
Big Tech
GoogleAppleMicrosoftAWSMetaOracleIBMCiscoCloudflareAkamaiRed HatSecurity Vendors
Palo AltoFortinetCrowdStrikeZscalerThalesCloudflareBroadcomSentinelOneWizBanking & Capital Markets
JPMorganGoldman SachsHSBCCitiBNY MellonBank of AmericaMorgan StanleyWells FargoBBVABarclaysBNP ParibasDeutsche BankPayments & Fintech
MastercardVisaStripePayPalAdyenFISFiservGlobal PaymentsBlockDigital Assets & Tokenization
BlackRockCircleRippleCoinbaseGalaxyFranklin TempletonOndoMaplePure-Play PQC Vendors
QuantinuumPQShieldCrypto4AQuSecureQryptBTQQuantropiSandboxAQThree trillion-dollar themes intersect here.
Tokenized deposits, stablecoins, and AI-payment rails — all still running on quantum-vulnerable ECDSA.