Subscribe
Technology

Australian startup says quantum physics can catch hacked devices

The core engineering problem Quantum Lock is solving is deceptively specific: how do you verify the internal state of a device you cannot physically reach? Software-based approaches rely on heuristics, pattern matching and code signatures.

7 min read
Quantum Lock brand art of a satellite beaming a quantum link to Earth
Quantum Lock says its physics-based checks can verify devices as remote as satellites. | Image: Quantum Lock
Alex Mercer
By Alex Mercer · 2026-08-17

TLDR

Canberra startup Quantum Lock says entangled photon pairs can prove that the memory of a remote embedded device has not been tampered with. The company has received AUD 110,000 in pre-seed funding from the Defence Trailblazer program, with industry trials planned for late 2026.

KEY TAKEAWAYS

01Quantum Lock uses entangled photon pairs to detect memory tampering on remote embedded devices, the company says.
02AUD 110,000 in Defence Trailblazer pre-seed funding backed the Canberra startup's early development.
03Underlying protocols were peer-reviewed and published in Springer Nature and Wiley journals in 2024 and 2025.
04First customer trials with an unnamed industry client are planned for late 2026 using existing quantum optics hardware.
05FBI and EPA warned in July 2026 that attackers are actively compromising internet-facing programmable logic controllers.

What quantum attestation actually does

The core engineering problem Quantum Lock is solving is deceptively specific: how do you verify the internal state of a device you cannot physically reach? Software-based approaches rely on heuristics, pattern matching and code signatures. They can tell you something looks wrong; they cannot tell you, with physical certainty, that nothing has changed. Quantum Lock uses entangled photons to prove, not infer, that the memory of a remote device has not been compromised.[1]

The mechanism turns on the properties of quantum entanglement. Pairs of photons are shared between a verifier and the device under test. Any alteration to the device's memory state disrupts the quantum correlations between those photon pairs, and that disruption is detectable without any software on the device needing to report it.[1] The physics does the checking, not the firmware.

Founder and CTO Dr Jesse Laeuchli framed the proposition plainly. "Quantum Lock complements existing defences with something no classical system can offer: physics-based proof that device memory has not been compromised," Laeuchli said.[1] That distinction, between proof and inference, is the commercial pitch as much as it is the technical claim.

The embedded-device gap current tools miss

Embedded devices sit at the operational edge of critical infrastructure: satellite transceivers relaying telemetry, programmable logic controllers governing water treatment chemistry, remote sensors on power distribution networks. What they share is that they run unattended, in the field, for months or years at a time. An operator in a control room cannot walk out and physically inspect one when something seems off.[1]

The FBI and the US Environmental Protection Agency warned in July 2026 that malicious cyber actors are actively targeting internet-facing programmable logic controllers, compromising operational technology devices across the water and wastewater sector.[3] The advisory described operational disruptions as an outcome already being observed, not a modelled future risk.

The conventional security stack was not built for this environment. Endpoint detection agents assume a device has spare compute cycles, a persistent connection and a trusted operating system layer to run on. Industrial controllers typically have none of those. Firmware integrity checks, where they exist at all, depend on the firmware itself to report its own status, which is precisely the layer an attacker would target first. Quantum Lock's pitch is that entanglement sidesteps this circularity entirely: the verification channel is physically separate from the device's computational layer.[1]

Who founded Quantum Lock and where the research comes from

Quantum Lock is a Canberra-based startup spun out of research conducted at UNSW. Dr Jesse Laeuchli serves as Founder and CTO; Gary Zamel holds the role of Executive Chairman.[1] The founding team bridges physics research and operational technology security, a combination the product demands given it requires deploying quantum optics hardware in industrial settings.

The protocols underpinning the Quantum Lock system were published in Quantum Information Processing, a Springer Nature journal, in 2024, and in IET Quantum Communication, published by Wiley, in 2025.[1] Peer-reviewed publication matters for a specific commercial reason: customers in defence, utilities and critical infrastructure will demand independent scientific validation before integrating a quantum system into an operational environment.

UNSW has listed Quantum Lock within its research investment portfolio, reflecting the university's ongoing connection to the company's technical development.[2] That institutional link provides access to laboratory infrastructure and a research network that would otherwise be prohibitively expensive for an early-stage startup to replicate independently.

Funding, trials and the commercial timeline

Quantum Lock received AUD 110,000 in pre-seed funding from the Defence Trailblazer program, a federally backed university-industry collaboration initiative designed to accelerate deep-technology companies from research into commercial application.[2] For a quantum hardware startup, that funding is early-stage support rather than a full development budget, but it signals formal endorsement from a programme with defence sector reach.

The company plans its first customer trials in late 2026 with an unnamed industry client, running on existing quantum optics hardware rather than purpose-built infrastructure.[1] Using existing hardware means the trial does not wait on a bespoke manufacturing pipeline, and it tests the system's compatibility with equipment already deployed in photonics research and quantum networking contexts.

The longer commercial arc depends on the maturation of quantum networks. Quantum Lock's current positioning targets the period before fibre-based quantum links extend into industrial campuses and critical infrastructure corridors, using point-to-point photon pair delivery to verify individual devices. Bushletter could not independently verify the company's commercial projections, which come from its own materials.

Regulator warnings give the timing some weight

The FBI and EPA joint advisory from 30 July 2026 describes the exact attack surface Quantum Lock is targeting.[3] Internet-facing programmable logic controllers in water and wastewater facilities were being actively compromised, with operational disruptions already observed rather than modelled.

What the advisory does not resolve is how operators are supposed to verify that a controller they cannot physically access is running unaltered code. Existing guidance centres on network segmentation, patching and monitoring. None of those measures provide the kind of memory-state proof Quantum Lock claims to offer. Whether the physics holds at industrial scale, and whether the photon-pair delivery mechanism survives the electromagnetic noise environment of a real operational technology site, is what the 2026 trials are designed to test.[1]

Dr Jesse Laeuchli has been direct about where the technology sits relative to existing defences. Quantum Lock uses entangled photons to prove, not infer, that the memory of a remote device has not been compromised, Laeuchli said.[1] Inference is what every current tool offers; the 2026 trials will determine whether the system delivers something beyond that.

FREQUENTLY ASKED QUESTIONS

What is quantum attestation and how does Quantum Lock use it?
Quantum attestation uses the properties of entangled photon pairs to verify the memory state of a remote device. If the device's memory has been altered, the quantum correlations between the photon pairs are disrupted. Quantum Lock's system detects that disruption, providing a physics-based guarantee of integrity rather than relying on software heuristics.
Why can't conventional cybersecurity tools protect embedded industrial devices?
Most endpoint security tools assume a device has spare computing capacity, a trusted operating system and a reliable connection. Industrial controllers and remote sensors often lack all three, and firmware-based integrity checks require the firmware itself to report its own status, which is the very layer an attacker would compromise.
How much funding has Quantum Lock received and from whom?
Quantum Lock received AUD 110,000 in pre-seed funding from the Defence Trailblazer program, a federally backed university-industry initiative. UNSW lists the company in its research investment portfolio.
When will Quantum Lock's technology be commercially available?
The company plans its first customer trials in late 2026 with an unnamed industry client, using existing quantum optics hardware. A broader commercial rollout is anticipated after that, as quantum networks mature.
Alex Mercer

Alex Mercer

Alex Mercer writes about technology, energy and infrastructure. He likes the physical end of the story: the plants, the grids and the machines that everything else depends on.

What's your reaction?

Make us a preferred source on Google

Tap once and our reporting shows at the top of your Google search results and AI answers. You can change this at any time.

Add as a preferred source on Google
Subscribe — it's free