Qlok
Pioneering quantum-safe security for a resilient future.
Took Qlok's quantum-safe security platform from research to a production-ready, cloud-native microservices architecture and launched the commercial QATI.AI application on AWS.

The challenge
Qlok has developed a quantum-proof security technology that uses hardware to entangle photons rather than relying on traditional quantum keys. The company was looking for a software development partner to help scale the product, which includes a multi-factor biometric enclave and authentication system. Qlok's stack runs on Python, React and Go, and the team wanted a strong partner for a multi-year AI project built on its existing technology.
What we did
First Factory engineered and scaled Qlok's zero-trust Quantum Adaptive Threat Intelligence (QATI) platform and the customer-facing QATI.AI application. The team defined service boundaries, built high-throughput asyncio and RabbitMQ pipelines for data ingestion and scoring, and removed processing bottlenecks with a dual-layer caching strategy across Redis and PostgreSQL. On the infrastructure side, the team managed cloud infrastructure as code with AWS CDK, containerized the Next.js and Express services on ECS Fargate, isolated internal services with ECS Service Connect, and set up automated CI/CD and AI-assisted development workflows.
The result
The partnership successfully transitioned Qlok’s platform from mathematical research into a hardened, production-ready cloud-native microservices architecture, eliminated critical processing bottlenecks by establishing sub-millisecond Redis hot-path caching alongside high-concurrency ingestion pipelines, launched the commercial qati.ai web application on AWS with secure billing and LLM integration, and fortified system security by keeping internal APIs fully isolated from the public internet using AWS ECS Service Connect.
We never wanted QATI to become another model sitting beside the model, making a probabilistic guess about whether an action was trustworthy. If a governance boundary matters, it has to be deterministic, reproducible, and enforceable. The same state under the same policy should produce the same decision every time—and we should be able to prove afterward exactly why it did. That is the difference between advising a system to behave and actually governing its execution.
About the client
Qlok Inc. is a visionary quantum cybersecurity firm specializing in advanced, physics-powered security solutions to ensure long-term data resilience against the threat of quantum computers. The company develops cutting-edge technologies, including its Biometric Device Authentication (BDA), which fuses personal biometrics with post-quantum cryptography for unhackable device authentication, and the Quantum Authentication Gateway, providing entanglement-based anomaly detection for quantum-resilient networks. Qlok's solutions are designed for seamless integration into existing enterprise infrastructures with minimal performance impact, charting a clear course to a quantum-resilient future for global markets, especially in defense and finance.







