SAVYINT Quantum Safe Security Gateway
A Zero Trust architecture-based security platform, ready for post-quantum cryptography in data centers
SAVYINT Quantum Safe Security Gateway is a next-generation security appliance specifically designed for modern data centers (DC). Built on a Zero Trust architecture, it supports post-quantum cryptography (PQC) algorithms compliant with NIST standards (ML-KEM, ML-DSA, SLH-DSA). It acts as a centralized security orchestration hub, managing identities, digital certificates, and secure connectivity between branches, mobile users, IoT devices, and enterprise internal applications.
Built on a disaggregated architecture separating the Control Plane and Data Plane using the NVIDIA BlueField-3 DPU, SAVYINT Quantum Safe Security Gateway ensures high performance, flexible scalability, and readiness against cybersecurity threats in the quantum computing era.
Benefits
- Identity-First Zero Trust – Security based on the rule “Never Trust, Always Verify”, where every connection is authenticated and authorized before being established, minimizing unauthorized access and preventing external attacks.
- Supports a CryptoAgile architecture, enabling flexible cryptographic transitions and helping organizations proactively respond to threats from quantum computing.
- Reduces attack surface and enhances system protection capabilities.
- Centralized management of identities, digital certificates, and security policies across the entire infrastructure, including multi-environment deployments (data center, cloud, branches, etc.).
- Improves system performance and stability.
Key Features
Centralized Security Infrastructure Management
- Centralized management of security policies, access control, and connectivity across the entire system – from data centers to branches and cloud environments.
- Monitoring of operational status, performance, and security alerts through a unified management interface.
- Rapid deployment and management of protected applications and services, enabling flexible infrastructure scaling and modification.
Zero Trust Access Control
- Authentication of all users, devices, and applications before granting access.
- Segmentation of systems into independent micro-segmented security zones.
- Application of flexible access policies based on user identity, device, location, time, and risk level.
Comprehensive Authentication Support
Passwordless authentication
Passkey / FIDO2 authentication
Multi-Factor Authentication (MFA)
Strong Customer Authentication (SCA)
Adaptive Authentication
Device-bound Authentication
Continuous Authentication
Risk-based Authentication
Multi-credential lifecycle management
Secure Connectivity Between Data Centers and Branches (Router - Branch)
- Establish secure connections between data centers, branches, disaster recovery (DR) sites, and cloud environments via a secure overlay network.
- Automatic optimal path selection to ensure performance and stability.
- Supports deployment across on-premise, private cloud, and hyperscaler environments such as AWS, Azure, and GCP.
Device Trust Management
- Assessment of device security posture before granting system access.
- Management and protection of endpoints, IoT, and OT devices.
- Automatic isolation of non-compliant devices (Comply-to-Connect – C2C) and allowing reconnection only after remediation.
7. Application Management and Protection
- Automatic discovery and management of applications, services, and APIs operating within the data center.
- Integration with service mesh platforms (Istio, Linkerd) for traffic management and application-level security.
- Enables fine-grained access policy configuration down to API endpoints, HTTP methods, and specific protocols.
Digital Certificate and PKI Management
Full lifecycle management of digital certificates and Public Key Infrastructure (PKI): issuance, renewal, and revocation.