Security that serves people
Plain English, not jargon. Clear answers, not fear. You decide what changes and when, and you can always see exactly what was done.
ODTAW
One Drop to a Wave
We're building an ecosystem of apps around two ideas: security that puts people first, and data sovereignty, where your data is yours, and stays readable only by you, today and ten years from now.
Our first release, QuantumReady, brings peace of mind into the age of quantum and AI.
One dropQuantumReady, our first app
A ripplean ecosystem of human-first security apps
A waveData Sovereignty · Personal and Civil Freedom
What we stand for
Human first. Sovereign by design.
Human-first security
Data sovereignty
Your data stays yours
No trackers, no ads, no data brokers, and no Big Tech in the critical path. When we work on your systems, the names you protect stay in your browser and your keys stay on your servers.
Radical transparency
Everything on the record
Every agreement signed and fingerprinted, every step of the work timed and written down, and nothing charged until you've seen it and said yes.
Community
Built by community, for community
Value stays local. Start with one drop, a single self-hosted node, and grow into a network with no company, server or person at its centre.
Why now
“Am I safe from new technologies that can crack keys?”
It's the question more companies are asking as quantum computing and AI arrive together. AI is making attackers faster at finding weak spots. Quantum computing threatens the keys themselves. And the honest answer starts with something most people don't expect: the risk isn't only in the future. It's in what leaves your network today.
Store now, decrypt later
Your encrypted data can be copied today and read later. Data that someone can decrypt in 2032 isn't sovereign today.
Encrypted traffic is easy to copy as it crosses the internet. Whoever copies it doesn't need to read it now. They only need to keep it until a quantum computer can break the key exchange that protected it, and then everything they stored opens at once: years of customer records, contracts, designs, medical and financial details. U.S. security agencies have warned that adversaries may already be collecting data this way.
Once it's copied, it can't be taken back. There is no patch, recall or password reset for data that's already been recorded. The only defence is to stop sending it in a form that can be broken later, and the sooner that happens, the less there is to lose.
The shelf-life test
How many years must your data stay secret? Patient records, contracts, designs, and employee and customer details often stay sensitive for ten years or more. Add the time it takes to change your systems. If the total runs past the day quantum computers can break today's keys, the data you send today is already exposed.
No one knows that day exactly. That's the point: by the time it's announced, everything recorded before it is already lost. You can't wait to find out.
The good news: the standards to stop it are ready. NIST published its first post-quantum encryption standards in August 2024, and its draft transition plan retires today's RSA and elliptic-curve encryption by 2030 and disallows it by 2035.
- It's urgent. Every day without post-quantum protection adds to the pile of data that can be read later. Protection applied today covers everything you send from today on; nothing can protect what's already been copied.
- It's easy. Most of the work is a configuration change: TLS 1.3 with a hybrid post-quantum key exchange. It works with the certificate you already have, current Chrome, Edge and Firefox already use it, and each server takes a 30-minute service window.
- It's the first step to sovereignty. Owning your data starts with making sure nobody else can read it, now or later.
Our first release
Introducing QuantumReady: peace of mind for the age of quantum and AI.
QuantumReady answers one question for your company: are we safe from new technologies that can crack keys? It shows what you're sending today in a form that could be read later, and closes the gap. Find out where you stand in 30 seconds. Fix it yourself, or let us.
It checks how each website or server protects its connections, how ready it is for post-quantum encryption, and exactly what to change, in plain English. It's built for organizations that run their own servers and don't have a security specialist on staff.
Free
Check
Enter an address and get a plain-English grade in about 30 seconds: outdated protocols, certificate health and post-quantum readiness. It only looks, and shows you every command it ran.
Run a check →
Free
Fix it yourself
A step-by-step plan for nginx, Apache, IIS or an AWS load balancer: what to copy and paste, how to back up first, and how to undo it.
Get your plan →
$100 per server
We fix it
We plan it with you, make the change at a time that suits you, check it worked, and stand by to put it back if anything goes wrong.
Order the fix →How the fix works
- A 15-minute planning call. Bring your technical staff. We agree each server's role, its best outage window, what connects to it, and how any change is undone.
- A statement of work to sign. Everything agreed, in one document you can download as a PDF and sign online. Nothing starts without both signatures.
- Protection first. Because every day counts, the first window switches on TLS 1.3 with the post-quantum key exchange using your existing certificate. If you need a new certificate, it follows; it never holds up the protection.
- Every step on the record. Each step is ticked off with the time as it happens, and the work record shows it all.
- You accept before you pay. You review the result, and only then is anything charged.
Moving everyone to TLS 1.3
Every connection still using older encryption is still being sent in a form that can be stored now and decrypted later. Our TLS 1.3 transition service reads your connection logs, names the networks still using the old version, drafts the messages for your team to send, and tracks each one until the old version can be switched off for good.
The bigger picture
QuantumReady is the first app in the ODTAW ecosystem: human-first security and data sovereignty, one drop at a time. The wave is a distributed network for essential services, with community-owned identity, hosting and communications. Read about it, or help build it.