Available now
A Qloak product
SealedGit
Git hosting that can’t read your code.
Our first product: end-to-end encrypted Git hosting, built on the foundation described above.
Visit sealedgit.com (opens in a new tab)Qloak Inc. · Post-quantum privacy
Private by construction.
Post-quantum by default.
Qloak builds end-to-end encrypted software for companies whose data must stay theirs. Your work is sealed on your own devices with NIST Category 5 post-quantum cryptography. The servers that store it hold only ciphertext, and no key to open it.
What the host can still see- ML-KEM-1024 · FIPS 203
- ML-DSA-87 · FIPS 204
- NIST Category 5
Approach
Host-blind by design.
Most cloud software protects your data from everyone except the company running it. Qloak is built to remove that exception, and every Qloak product works the same way.
-
Sealed on your device.
Your work is encrypted on your team’s own devices before it is sent. The keys stay there. The host holds none that can decrypt it.
-
Stored blind.
The host stores and serves ciphertext. Features that would require it to read your content, such as server-side search, are left out on purpose.
-
Opened only by your team.
A member’s device admits each newcomer after both compare a safety number. An invitation alone grants nothing, and the host cannot admit anyone.
Quantum readiness
Built for data that must stay private for decades.
Encrypted data that is stored or intercepted today could be decrypted later by a cryptographically relevant quantum computer. This is the risk known as “harvest now, decrypt later.” Source code, roadmaps and research keep their value for years, and a host keeps your ciphertext for as long as the work exists. So Qloak seals customer content with the post-quantum algorithms NIST finalized in 2024, at NIST Category 5.
- 2024
- NIST finalizes the first three standards of its post-quantum project, FIPS 203, 204 and 205.
- Category 5
- The highest of NIST’s five post-quantum security categories.
- AES-256
- The yardstick. An attack on a Category 5 parameter set should cost at least as much as a key search on AES-256.
Technology
NIST Category 5 for your content.
Every Qloak product protects customer content with NIST Category 5 post-quantum cryptography, as the foundation and not an upgrade tier. They share one design: the same key establishment, the same signatures and the same encryption.
| Protects | Algorithm | Standard |
|---|---|---|
| Key establishment | ML-KEM-1024 | FIPS 203 · NIST Category 5 |
| Digital signatures | ML-DSA-87 | FIPS 204 · NIST Category 5 |
| Messages shared within a team | AES-256-GCM | FIPS 197 · SP 800-38D |
| Stored content, sealed with each change | Key-committing AEAD built on HKDF-SHA-512 and HMAC-SHA-512 | FIPS 180-4 · FIPS 198-1 · RFC 5869 |
| Group key agreement | Messaging Layer Security | RFC 9420, with a post-quantum ciphersuite from an IETF Internet-Draft |
What the host can, and cannot, see.
Sealed on members’ devices
- Your content and files
- Comments, discussions and reviews
- Descriptions
- Encryption keys
Visible to the host
- Usernames
- Names of shared spaces, such as repositories
- Team membership
- Size and timing of updates
Held by the accounts service, not the host
- Email addresses, including invitees’
- Password hashes
Encryption protects confidentiality, not availability. The host can refuse service or delete data, so keep your own copies. A compromised device exposes what that device can read. Removing a member seals later changes from them, not what they already fetched.
Every Qloak product follows this model. We publish it because honest privacy starts with naming what isn’t hidden.
Products
One foundation. Multiple products.
Familiar tools for your most sensitive work, rebuilt so the provider can’t read what you put in them.
In development
SealedProject
Project management the host can’t read.
An end-to-end encrypted project management system, being built on the same NIST Category 5 foundation.
Request early accessCompany
About Qloak.
Qloak Inc. is a privacy and security company. We build end-to-end encrypted software for organizations that need their data to remain their own. Our products are designed so that the host, including Qloak, holds no key that could decrypt customer content.
-
NIST Category 5 for customer content.
Every product protects what you write with NIST Category 5 post-quantum cryptography.
-
No keys on our servers.
Our servers hold no keys that can decrypt customer content.
-
Honest about metadata.
Each product documents exactly what the host can see.
-
Private in practice.
This website sets no cookies, runs no analytics and loads nothing from third parties.
Contact
Speak with us.
For our products, SealedProject early access, partnerships or press.
Demo mode: your message was validated and then discarded. Nothing was stored.
Your message couldn’t be sent. Please check every field and try again.
Too many messages. Please try again in a minute.