Commvault Expands Post-Quantum Encryption to Counter ‘Harvest Now, Decrypt Later’ Threats

As quantum computing advances from theory to real-world application, it brings with it a new category of cybersecurity risk. With the potential to break today’s most widely used encryption methods, quantum technology is prompting data-centric organizations to rethink how they protect long-term sensitive data. In response, Commvault is expanding its post-quantum cryptography (PQC) capabilities to help customers get ahead of emerging threats.

Building on its cryptographic agility framework introduced in 2024, Commvault has added support for Hamming Quasi-Cyclic (HQC), a NIST-recommended algorithm designed to defend against attacks where encrypted data is harvested today and decrypted in the future using quantum computers. This enhancement positions Commvault to better protect industries that store high-value data for extended periods—such as healthcare, government, and financial services.

These expanded capabilities are available through the Commvault Cloud platform, enabling customers to adopt quantum-safe encryption without replacing or overhauling existing infrastructure. Risk analysis tools also allow customers to identify which data types require stronger cryptographic protections and where these controls should be applied. For organizations concerned with compliance or long-term data confidentiality, the ability to activate PQC with minimal configuration helps streamline adoption.

Quantum computing may still be in its early stages, but the threat of decryption at scale is no longer abstract. As quantum investments accelerate, so too does the urgency for businesses to incorporate forward-looking encryption strategies.

For managed security service providers (MSSPs), Contrast’s Northstar release opens up new possibilities for delivering advanced application-layer protection as part of their service offerings. With real-time attack visibility, dynamic risk scoring, and AI-assisted remediation built into a unified platform, MSSPs can streamline how they detect and respond to threats targeting customer applications and APIs. The integration of Application Detection and Response (ADR) with AppSec workflows gives MSSPs the tools to move beyond static testing and offer continuous, runtime-aware protection that aligns with DevSecOps pipelines. As more organizations look to outsource application security in complex environments, Northstar provides MSSPs with a differentiated, high-value capability set to support modern threat defense at scale.