Key points
- IonQ signed a definitive agreement to acquire zero-trust security firm Elisity in an all-stock transaction valued at up to $1.3 billion.
- The deal combines Elisity’s least-privilege access software with IonQ’s existing post-quantum cryptography and quantum key distribution capabilities.
- IonQ expects to complete the acquisition in the fourth quarter of 2026, with Elisity management remaining in charge of the business.
The short version
- IonQ will buy Elisity for up to $1.3 billion in stock, closing in late 2026.
- Elisity brings zero-trust access controls and AI agent governance to IonQ’s quantum security portfolio.
- The merger aims to help customers prioritize post-quantum upgrades based on current access risks and identity data.
The details
IonQ announced on Monday that it signed a definitive agreement to acquire Elisity in a stock-only transaction valued at up to $1.3 billion, according to SecurityWeek. Up to $150 million of that total depends on future performance earnouts. The number of IonQ shares issued will be determined by the company’s volume-weighted average price over 20 trading days before closing, with a price range set between $33.07 and $49.61. IonQ expects to finalize the acquisition in the fourth quarter of 2026. Elisity, founded in 2019, sells software that enforces least-privilege policies for users, devices, workloads and AI agents on enterprise networks.
The California-based startup uses a component called IdentityGraph to combine its own data with partner tools for identity, asset and risk details, guiding access decisions. Elisity reports more than 100 customer deployments and says it has doubled its revenue and customer base year over year with zero churn among deployed customers, according to CyberScoop and Industrial Cyber. The startup previously raised more than $70 million. Elisity’s existing management team, including CEO James Winebrenner, will remain in charge of the business once the deal closes.
The context
IonQ’s portfolio spans quantum computing, networking, sensing and security, including post-quantum cryptography (PQC) and quantum key distribution (QKD). The company plans to use Elisity’s customer and CISO relationships to reach more enterprise and government buyers for these technologies. IonQ CEO Niccolo de Masi cited the approaching "Q-Day," the point when quantum computers could break widely used public-key encryption, stating it is coming much faster than predicted. He noted recent White House executive orders promoting quantum technology and pushing federal agencies to adopt PQC sooner.
The two companies plan to add cryptographic inventory and risk data to IdentityGraph. This integration aims to help organizations decide which post-quantum upgrades to tackle first by weighing business risk and the criticality of affected operations. Elisity CEO James Winebrenner wrote that access controls reduce exposure while cryptographic upgrades address underlying weaknesses. He noted that customers need to prioritize PQC initiatives while securing existing assets to keep essential operations running.
What to watch
- Monitor IonQ’s progress in integrating Elisity’s IdentityGraph with its quantum security offerings for combined risk assessments.
- Track how federal agencies and major companies adjust their post-quantum cryptography migration timelines in response to executive orders.
- Watch for updates on Elisity’s ability to govern AI agent communications as enterprise AI adoption accelerates across networks.
What it means for organisations
Organisations should assess how vendor acquisitions impact their long-term security strategy and supplier dependencies. Teams usually review contract terms to ensure service continuity and data governance standards remain consistent after a merger. It is critical to verify that the acquired product’s roadmap aligns with the organisation’s internal migration plans for encryption and access controls. Security leaders should communicate with procurement and legal teams to understand any shifts in support structures or licensing models that could affect operational stability.
Background: Encryption
Encryption is the process of converting plain text into ciphertext using an algorithm and a key. It prevents unauthorized access to data at rest and in transit. Without the correct decryption key, the information remains unintelligible, protecting privacy and integrity against interception or theft.
Read the full guide: What Is Encryption: Meaning, Definition, and How It Works
What to do and how to stay safe: IonQ
- Audit current zero-trust and access control policies to identify gaps where AI agents or new workloads might bypass existing restrictions.
- Inventory all cryptographic assets and determine which systems are most critical to business operations to prioritize future upgrades.
- Review vendor contracts to understand how M&A activity might affect support levels, data sovereignty or integration capabilities.
- Monitor official guidance from federal agencies regarding post-quantum cryptography timelines to align internal migration schedules.
Step-by-step guide: Secure Home Routers for Small Business Networks
General security guidance from the TechSec Headlines newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
When is IonQ expected to complete the acquisition of Elisity?
IonQ expects to complete the acquisition in the fourth quarter of 2026.
What is the total value of the deal?
The all-stock transaction is valued at up to $1.3 billion, with up to $150 million contingent on performance.
Will Elisity’s management team stay after the acquisition?
Yes, Elisity CEO James Winebrenner and the existing management team will remain in charge of the business.
