Quantum-secure networking is moving from lab idea to something organizations can test. On October 14, 2026, software-defined networking company ZeroTier announced Release Candidate 3 (RC3) of ZeroTier Quantum. The company says the platform delivers end-to-end quantum-safe connectivity and can be deployed as a managed service or in sovereign, self-hosted and fully air-gapped environments, including systems that never touch the public internet.
What quantum-secure networking in ZeroTier Quantum includes
According to ZeroTier, the platform combines ML-KEM-1024 with optional P-384 classical cryptography in a configurable hybrid key exchange. ML-DSA-87 provides post-quantum digital signatures, and AES-256-GCM protects data in transit. Classical algorithms can be switched on or off depending on customer requirements or regulatory roadmaps. The company says cryptographic identity and authenticated connectivity are enforced on each network packet, end to end, and describes the result as designed to meet or exceed CNSA 2.0.
RC3 also adds practical features, the company says:
- Clients for Windows, macOS and Linux, with Android support for mobile environments.
- Credential-based enrollment, so administrators control which devices can join.
- An authenticated, dedicated delivery portal for entitlements and software access.
- Audit event generation for administrative and security events, as a foundation for wider auditing and observability.
Why sovereign and air-gapped deployment matters
ZeroTier’s CEO Andrew Gault said that for government, defense and critical infrastructure, “where a network runs matters just as much as how it’s secured.” Being able to run the platform inside a customer’s own infrastructure could appeal to organizations that cannot rely on a managed service. Chief Commercial Officer Robert Stevenson said RC3 is already in use with live customers that have strict requirements around cryptography, isolation or control.
The company links the release to the White House Executive Order 14412 from June, which it says accelerates the US federal move to post-quantum cryptography, and says similar efforts are taking shape in Europe and elsewhere. The wider backdrop is a quantum industry that analysts see growing fast, as we noted in the race toward a $2.7 trillion quantum computing opportunity, and long-running worries about quantum hacking as a growing concern.
The other side: a release candidate and company claims
It is worth keeping the wording in perspective. RC3 is a release candidate, not a final product. ZeroTier itself says technical and end-user quality assurance are “well underway”, not finished. Phrases such as “the world’s only” and “world’s first” end-to-end quantum-secure networking platform are the company’s own claims, and the release does not name customers.
ZeroTier says the platform has been through NIST cryptographic review workstreams and protocol and code audit validations, but it does not name the auditors or publish findings. Post-quantum algorithms are newer than the classical ones they sit beside, which is partly why hybrid modes exist, and “designed to meet or exceed CNSA 2.0” is the vendor’s own description, not a certification we can verify. The release also does not mention iOS support, performance figures or pricing.
From a security view, any network platform becomes a high-value target. How enrollment credentials, the delivery portal and audit logs are protected will matter as much as the algorithms. The release does not go into these details, so organizations will want to test and review them independently.
My view on quantum-secure networking
As a writer, I feel the strongest idea here is flexibility. Many organizations cannot simply rip out their networks, and a hybrid, customer-controlled approach with classical options that can be turned on or off seems practical. At the same time, big claims deserve independent checking, especially for something sold to defense and critical infrastructure. I would want to see published audit results and a final release before calling it production-ready. Readers can weigh the promise against these open questions.
FAQ: ZeroTier Quantum RC3 and quantum-secure networking
What is ZeroTier Quantum RC3?
It is Release Candidate 3 of ZeroTier Quantum, announced October 14, 2026, which the company describes as the final production step towards full deployment of its quantum-secure networking platform.
Which algorithms does it use?
According to ZeroTier, it uses ML-KEM-1024 with optional P-384 in a hybrid key exchange, ML-DSA-87 for signatures and AES-256-GCM to protect data in transit.
Can it run in air-gapped environments?
ZeroTier says yes. Organizations can deploy it as a managed service or in sovereign, self-hosted and fully air-gapped infrastructure.