IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion

IonQ Pairs Quantum Cryptography Business With Zero-Trust Access Controls in $1.3B Acquisition

IonQ, the Maryland-based quantum computing company, announced on October 12, 2026 that it has entered a definitive agreement to acquire Elisity, a zero-trust network security firm, in an all-stock transaction valued at up to $1.3 billion. The deal includes up to $150 million in earnout consideration contingent on Elisity's future performance, with the remainder paid in IonQ shares priced between $33.07 and $49.61 based on a 20-trading-day volume-weighted average ahead of closing. IonQ expects to complete the acquisition in the fourth quarter of 2026, pending regulatory approval. The announcement ties directly to accelerating federal and enterprise timelines for migrating to post-quantum cryptography (PQC), with IonQ CEO Niccolo de Masi stating that "Q-Day is coming much faster than predicted," referring to the point at which quantum computers become capable of breaking widely used public-key encryption.

Deal Details

Attribute	Value
Acquirer	IonQ, Inc. (quantum computing)
Target	Elisity, Inc. (zero-trust network security)
Deal value	Up to $1.3 billion
Structure	All-stock; up to $150 million is earnout-contingent
Share price range	$33.07–$49.61 per IonQ share (20-day VWAP ahead of close)
Announced	October 12, 2026
Expected close	Q4 2026 (subject to regulatory approval)
Elisity leadership post-close	Retained; CEO James Winebrenner continues leading the business
Strategic rationale	Combine Elisity's zero-trust access controls with IonQ's post-quantum cryptography and quantum key distribution (QKD) portfolio

What Elisity Does

Founded in 2019, Elisity sells a software policy layer that governs which users, devices, workloads, and AI agents are permitted to communicate across an enterprise network, enforced on a least-privilege basis and largely independent of the underlying network hardware. Its core product, IdentityGraph, aggregates identity, asset, and risk data — collected directly and pulled from partner tools — to drive real-time access decisions, a model generally described in the industry as zero-trust microsegmentation.

According to IonQ, Elisity has more than 100 customer deployments globally, has doubled its revenue and customer base year over year, and reports no churn among deployed customers. The company has raised more than $70 million in prior funding.

Why a Quantum Company Is Buying a Zero-Trust Vendor

IonQ has spent the past two years assembling a broader security and sensing portfolio alongside its core quantum-computing hardware business, including post-quantum cryptography and quantum key distribution offerings. The strategic logic behind the Elisity deal rests on connecting two previously separate problems:

Access control limits who or what can reach sensitive systems today — but it does not address the underlying cryptography protecting that data in transit or at rest.
Cryptographic migration replaces vulnerable public-key algorithms with quantum-resistant ones — but enterprises struggle to know which systems to prioritize first.

Post-acquisition, IonQ and Elisity plan to add cryptographic inventory and risk data directly into IdentityGraph, so that security teams can see not just who has access to a system, but which cryptographic dependencies protect it and how urgently each needs a post-quantum upgrade. Elisity CEO James Winebrenner framed the combination this way: "Access controls reduce exposure; cryptographic upgrades would address the underlying weaknesses." The stated goal is helping organizations sequence PQC migrations by actual business risk rather than migrating systems in an arbitrary order.

The "Harvest Now, Decrypt Later" Threat

The acquisition is also framed around a specific class of attack: adversaries — often nation-state actors — who intercept and store encrypted traffic today with the expectation that future quantum computers will be able to decrypt it retroactively. Because this threat makes the timing of PQC migration as important as the migration itself, IonQ's pitch is that pairing identity-based access control with cryptographic risk visibility shortens the window during which harvested data remains exploitable once quantum decryption becomes feasible.

Federal and Enterprise Timeline Pressure

The deal lands against a backdrop of compressed migration deadlines. A White House executive order issued June 22, 2026 directs federal agencies to migrate to post-quantum cryptography by 2030, moved up from an earlier 2035 target. Major technology companies, including Google, have set internal targets to complete PQC migration by 2029. IonQ's framing positions the Elisity deal as helping both government and enterprise customers meet these accelerated timelines by combining access-control enforcement with cryptographic-risk prioritization in a single platform.

Impact Assessment

Impact Area	Description
Market reaction	IonQ shares fell roughly 9% to $36.19 in morning trading following the announcement, extending IonQ's year-to-date decline to approximately 19%
Shareholder dilution	The all-stock structure, plus a potential $150M earnout paid in additional shares, dilutes existing IonQ shareholders to fund the cybersecurity pivot
Sector spillover	Other pure-play quantum computing stocks, including D-Wave and Rigetti, fell roughly 4% in sympathy despite carrying no direct dilution exposure
Zero-trust market consolidation	A 100+ customer, VC-backed zero-trust vendor exits as an independent company, continuing a trend of microsegmentation players being absorbed into larger platforms
Regulatory timeline exposure	Federal agencies and large enterprises now face compressed 2029–2030 PQC migration deadlines, increasing demand for tools that help prioritize and sequence upgrades
Integration risk	The value of the combination depends on IonQ successfully merging Elisity's IdentityGraph with its own cryptographic-inventory capabilities — a technical integration that has not yet shipped

Recommendations

For Elisity Customers

Confirm with your account team whether support, pricing, and the product roadmap change once the deal closes in Q4 2026; all-stock acquisitions of this size typically trigger contract and integration reviews.
Ask specifically how IdentityGraph's planned expansion into cryptographic inventory will affect existing zero-trust policies and whether new data sources will be added to access-decision logic.
Continue zero-trust microsegmentation deployments as planned — IonQ has stated Elisity will retain its leadership team and continue operating largely independently post-close.

For CISOs and Security Leaders

Treat this acquisition as a signal, not a solution: pairing access control with cryptographic-risk data is a roadmap item, not a shipped capability, as of the October 2026 announcement.
Begin or continue building a cryptographic asset inventory now — knowing which systems rely on vulnerable public-key algorithms is the prerequisite for any PQC prioritization effort, regardless of which vendor eventually supplies the tooling.
Map internal PQC migration timelines against the federal 2030 deadline (per the June 22, 2026 executive order) and industry targets like Google's 2029 goal, even if your organization isn't directly subject to either, since vendor and partner ecosystems will increasingly assume those timelines.

For IT and Procurement Teams

Evaluate zero-trust network access (ZTNA) and microsegmentation vendors on their cryptographic-risk roadmap, not just current access-control features, given that competitors will likely respond to this deal with similar PQC integration announcements.
Budget for post-quantum migration work as a multi-year line item rather than a one-time project — the accelerated 2029–2030 deadlines leave limited room to defer planning.

Key Takeaways

IonQ agreed to acquire zero-trust security firm Elisity in an all-stock deal valued at up to $1.3 billion, including a $150 million earnout, expected to close in Q4 2026.
Elisity's IdentityGraph platform enforces least-privilege, zero-trust microsegmentation across more than 100 customer deployments, with doubled year-over-year revenue and no customer churn.
The strategic rationale connects Elisity's access-control enforcement with IonQ's post-quantum cryptography and quantum key distribution business, aiming to help enterprises prioritize PQC upgrades by business risk rather than arbitrary order.
IonQ CEO Niccolo de Masi cited accelerating "Q-Day" timelines, while a June 22, 2026 White House executive order moved the federal PQC migration deadline up to 2030 (from 2035), with major tech companies like Google targeting 2029.
Markets reacted negatively to the all-stock structure: IonQ shares fell approximately 9%, extending a roughly 19% year-to-date decline, with sympathy drops of about 4% at D-Wave and Rigetti.
This is IonQ's latest in a string of 2025–2026 acquisitions, following its roughly $1.1 billion purchase of Oxford Ionics and its $311 million acquisition of Capella Space, both also funded with IonQ stock.