// Solutions page — Two deployment tracks: Hardware + Software function SolutionsPage() { const sentinelSpecs = [ ['Processor', 'Intel Xeon Gold 6248R — 24 cores, 3.0 GHz'], ['Memory', '128 GB DDR4 ECC'], ['Storage', '2 TB NVMe SSD + 8 TB threat intelligence archive'], ['Network', 'Dual 10 GbE NICs + dedicated fiber optic QKD interface'], ['Security Hardware', 'Thales Luna HSM 7 — FIPS 140-2 Level 3 + TPM 2.0'], ['QKD Hardware', 'ID Quantique Clavis3'], ['QRNG Device', 'ID Quantique Quantis — 4 Mbps entropy generation'], ['Best for', 'Classified networks, sovereign fibre links, defence perimeters'], ]; const guardianSpecs = [ ['Processor', 'Intel Xeon Silver 4214 — 12 cores, 2.2 GHz'], ['Memory', '64 GB DDR4 ECC'], ['Storage', '1 TB NVMe SSD + 4 TB archive'], ['Network', 'Dual 1 GbE NICs or single 10 GbE NIC'], ['Security Hardware', 'TPM 2.0 (HSM optional, recommended)'], ['QKD Hardware', 'Not required — PQC-only operation'], ['QRNG Device', 'Software entropy source with ANU QRNG API'], ['Best for', 'Government agencies, healthcare, financial infrastructure'], ]; const calloutBoxes = [ { title: 'Software Stack', items: [ 'Ubuntu Server 22.04 LTS hardened', 'Rust core services', 'Python 3.11 threat intelligence', 'liboqs 0.9.0+ Open Quantum Safe', 'PostgreSQL 15 with pgcrypto', 'Apache Kafka 3.5', ], }, { title: 'Key Exchange Protocol', items: [ 'QKD BB84 with decoy states', 'Kyber-1024 KEM fallback', 'MCQKR — Monte Carlo Quantum Key Rotation', 'Automatic failover to PQC-only if QKD unavailable', ], }, { title: 'Security Layers', items: [ 'mTLS 1.3 with PQC ciphers', 'AES-256-GCM encryption', 'Dilithium-5 digital signatures', 'HMAC-SHA3-512 integrity', 'BFT consensus validation', 'HSM key storage', ], }, ]; const softwareCards = [ { title: 'Drop-In Deployment', body: 'Install a lightweight container on existing cloud servers — x86 or ARM — via Docker or Kubernetes on AWS or Azure. No custom hardware. No re-architecting. No application code changes. From deployment to full protection in under 24 hours.', }, { title: 'Dual-Spectrum Engine', body: 'The Silbersperre core runs two cryptographic layers simultaneously — RSA-4096 for classical threat protection and CRYSTALS-Kyber (ML-KEM) + CRYSTALS-Dilithium (ML-DSA) for quantum-safe protection. If either layer is ever compromised independently, the other maintains full data protection. Defense in parallel, not merely in depth.', }, { title: 'Live Watch — HNDL Detection', body: "Silbersperre's Live Watch module monitors network traffic for behavioural patterns consistent with Harvest Now, Decrypt Later operations — bulk encrypted data exfiltration signatures characteristic of state-sponsored harvest campaigns. Upon detection, encryption protocols escalate automatically and the CISO is alerted immediately. This is the only commercially available tool that actively identifies live HNDL attempts in real time.", }, ]; const steps = [ { title: 'Deploy Container', body: 'Install the QDI lightweight container on existing cloud infrastructure. Runs directly on the existing stack via Docker/Kubernetes. Zero disruption. Client infrastructure continues at full capacity throughout.', }, { title: 'Wrap Data Streams', body: 'The Dual-Spectrum Engine activates — automatically wrapping all legacy data streams in a dual-layer cryptographic shell. No changes to application code. No re-architecting. All data in transit and at rest is now protected by both RSA-4096 and NIST PQC algorithms simultaneously.', }, { title: 'Resume Operations with Full Immunity', body: 'System reboots with full immunity active. Full NIST PQC compliance is live from the moment of activation. FIPS 140-3 validation underway for U.S. Federal procurement eligibility. Infrastructure is now invisible to HNDL attacks.', }, ]; const compareRows = [ ['Deployment Speed', '2–4 weeks (physical install)', 'Under 24 hours'], ['Best For', 'Classified / sovereign / air-gapped environments', 'Enterprise / cloud / rapid compliance'], ['QKD Support', 'Full QKD via ID Quantique hardware', 'PQC-only (QKD roadmap in Phase 3)'], ['Infrastructure Changes', 'Physical nodes installed on-premises', 'Zero — deploys on existing cloud stack'], ]; const compliance = [ { tag: 'NSM-10', body: 'U.S. White House National Security Memorandum — PQC transition mandate for all National Security Systems by 2030' }, { tag: 'CNSA 2.0', body: 'Commercial National Security Algorithm Suite 2.0 — NSA-mandated quantum-resistant algorithms for classified systems' }, { tag: 'EU NIS2', body: 'European Network and Information Systems Directive — quantum resilience obligations for critical infrastructure operators' }, { tag: 'FIPS 140-3', body: 'Federal Information Processing Standard — cryptographic module validation required for U.S. Federal procurement' }, ]; return (
{/* Page Header */}
Deployment Options

Two Ways to Deploy

QDI delivers quantum-safe security through two complementary deployment tracks — a physical hardware infrastructure for maximum-security environments, and a software platform for rapid enterprise deployment. Both tracks run the same Dual-Spectrum core.

{/* SECTION 1 — HARDWARE */}
Track 01 — Hardware

QDI QETIS

Quantum Encrypted Threat Intelligence Sharing

Physical Quantum Security Infrastructure

For government agencies, defence organisations, and critical infrastructure operators requiring sovereign-grade, physically isolated quantum security nodes deployed on-premises.

{/* Two-column: text + node cards */}

QDI's hardware deployment track installs purpose-built physical security nodes directly within a client's facility or secure data centre. These nodes operate fully air-gapped or fiber-connected, providing quantum key distribution and post-quantum cryptographic protection at the hardware level — independent of cloud infrastructure and immune to software-layer compromise.

Hardware deployment is suited for environments where data sovereignty, regulatory isolation, and physical security clearance are non-negotiable requirements — including classified government networks, sovereign defence communications, and national critical infrastructure.

{/* Mesh Network band */}
QETIS Node Network

Sentinel and Guardian nodes form a decentralised mesh network — each node communicates via encrypted quantum-safe channels, shares threat intelligence in real time, and operates Byzantine Fault Tolerant consensus. The network strengthens with every node added. A network of 100+ nodes can validate and isolate threats collectively, with no single point of failure.

{/* Three callout spec boxes */}
{calloutBoxes.map((b) => (
{b.title}
    {b.items.map((i) => (
  • ◆ {i}
    • ))}
))}
{/* DIVIDER */}
{/* SECTION 2 — SOFTWARE */}
Track 02 — Software

QDI Silbersperre

Dual-Spectrum Software Security Platform

For enterprise organisations, government IT departments, and regulated operators requiring rapid deployment with zero hardware changes and zero operational downtime.

{/* Two-column: feature cards + timeline — equal height columns */}
{softwareCards.map((c) => (

{c.title}

{c.body}

))}
{/* Comparison table */}

Choosing Your Deployment Track
{/* SECTION 3 — COMPLIANCE */}
Regulatory Alignment

Built for the Mandate

{compliance.map((c) => (
{c.tag}

{c.body}

))}
); } function NodeCard({ name, sub, specs, ringCount }) { return (
{name}
{sub}
    {specs.map(([label, val]) => (
  • {label} {val}
    • ))}
); } function NodeRingIcon({ rings }) { return ( ); } function MeshDiagram() { // Hub-and-spoke layout — Observer at center, 5 outer nodes (3 Sentinel, 2 Guardian) const observer = { x: 300, y: 250 }; const nodes = [ { x: 300, y: 65, kind: 'sentinel', label: 'SENTINEL', anchor: 'middle', tx: 300, ty: 65 - 52 }, // 12 o'clock — above { x: 476, y: 172, kind: 'guardian', label: 'GUARDIAN', anchor: 'start', tx: 476 + 44, ty: 172 + 4 }, // 2 o'clock — right { x: 414, y: 420, kind: 'sentinel', label: 'SENTINEL', anchor: 'middle', tx: 414, ty: 420 + 52 }, // 4 o'clock — below { x: 186, y: 420, kind: 'guardian', label: 'GUARDIAN', anchor: 'middle', tx: 186, ty: 420 + 52 }, // 8 o'clock — below { x: 124, y: 172, kind: 'sentinel', label: 'SENTINEL', anchor: 'end', tx: 124 - 44, ty: 172 + 4 }, // 10 o'clock — left ]; const sentinelColor = '#0e9e88'; const guardianStroke = 'rgba(14,158,136,0.55)'; const guardianFill = 'rgba(14,158,136,0.05)'; const guardianDot = 'rgba(14,158,136,0.7)'; // Encrypted channel midpoint between Node 1 (top sentinel) and Node 2 (upper-right guardian) // Offset slightly outward (away from observer) so the label doesn't sit on the line. const m12x = (nodes[0].x + nodes[1].x) / 2; const m12y = (nodes[0].y + nodes[1].y) / 2; const dx = m12x - observer.x; const dy = m12y - observer.y; const d = Math.sqrt(dx * dx + dy * dy); const offset = 14; const ecX = m12x + (dx / d) * offset; const ecY = m12y + (dy / d) * offset; return (
); } function Timeline({ steps }) { return (
{/* vertical line — runs through the exact center of every circle (cx = 20px) */}
{steps.map((s, i) => (
{i + 1}

{s.title}

{s.body}

))}
); } function ComparisonTable({ rows }) { const headerBg = 'rgba(8,18,26,0.95)'; return (
{['', 'Hardware Track', 'Software Track'].map((h, i) => (
{h}
))}
{rows.map((r, idx) => (
{r[0]}
{r[1]}
{r[2]}
))}
); } Object.assign(window, { SolutionsPage });