Post-quantum security, fully operated.
Stringer deploys, runs, and supports the AVON post-quantum zero-trust platform for federal and commercial teams. You get the cryptography, the compliance posture, and the operating expertise — without the on-call rotation.
- RESPONSE SLA
- 1 hour
- DEPLOYMENT
- <30 days
- NIST LEVEL
- 800-171
- COMPLIANCE
- Per client spec
Post-quantum infrastructure, run by people who built it.
Managed deployment
We stand up and run the AVON post-quantum stack in your environment — AWS, Azure, GCP, or on-prem — and we get you to production in 30 days.
Continuous compliance
FIPS-validated post-quantum cryptography with audit-ready evidence, refreshed continuously. Mappings to NIST 800-53, FedRAMP, and SOC 2 controls.
Always-on operations
Engineering on-call around the clock. One-hour P1 response for Enterprise. Dedicated TAM, named escalation paths, monthly operations review.
Federal-ready
Architectures aligned with FedRAMP, SOC 2 Type II, and CISA Zero Trust guidance. US-citizen support for federal civilian, DoD, and government contractors.
Custom engineering
Need a protocol extension, an MDM bridge, or a bespoke policy engine? Our team built AVON. They can build whatever your stack actually needs.
Open core, no lock-in
AVON is Apache 2.0 and self-hostable. You can always run it yourself. We just make it boring — when boring is what you want.
The platform we run for you.
AVON's post-quantum architecture, operated by Stringer. Every component verified, every connection encrypted, every decision logged.
Identity issued
The Certificate Authority issues the agent a Dilithium-5 identity certificate. Private keys stay in an HSM and rotate automatically.
Audit-ready by default.
| Framework | Standard | Status |
|---|---|---|
| FIPS 203 / 204 | ML-KEM / ML-DSA | LIVE |
| NIST Level 5 | Category 5 | LIVE |
| NIST 800-53 | Rev. 5 | LIVE |
| SOC 2 Type II | Trust Services Criteria | LIVE |
| HIPAA | Security Rule | LIVE |
| PCI DSS | v4.0 | LIVE |
| GDPR | Article 32 | LIVE |
| NIST 800-171 | Rev. 3 | COMPATIBLE |
| FedRAMP | Moderate | IN PROGRESS |
Full audit logging with actor, action, resource, outcome, and context for every security event. Status pills reflect Stringer's current attestation posture; "In Progress" attestations are tracked publicly and shared with prospects under NDA.
Three ways to run Stringer.
Same post-quantum stack underneath, three operational postures depending on your compliance and isolation needs.
Managed Cloud
Multi-tenant Stringer cloud, hosted and operated by us. Fastest path to production — most customers go live in under 30 days.
Best for: commercial teams up to mid-market.
Dedicated Tenant
Single-tenant infrastructure in your region of choice. Customer-isolated HSMs, private networking, custom retention policies.
Best for: regulated industries and large enterprises.
Federal
IL-N-target architecture, US-citizen support, FedRAMP-aligned controls. Operated under separate contracting vehicle.
Best for: federal civilian, DoD, and government contractors.
Make sense of the post-quantum landscape.
Most teams know they need to migrate. Few know what to migrate first, what risk the NIST timelines actually create, or how to inventory cryptography across systems they didn't build. We've spent years on the standards and the implementations.
PQ Assessment & Roadmap
Inventory your cryptography. Threat-model the migration. Prioritize what to replace first against the NIST timeline.
Outcome: a defensible 18-month migration plan.
Managed Deployment
We run Stringer for you on the timeline you need. Most customers reach production in 30 days, with continuous evidence collection from day one.
Outcome: production ZTNA, post-quantum from day one.
Custom Engineering
Protocol extensions. MDM bridges. Custom policy engines. Integrations with your IDP, your SIEM, your existing CA. Our team built AVON; they can build anything around it.
Outcome: Stringer fits your stack, not the other way around.
Open core. Operated by us when you need it.
| Capability | AVON | Stringer Pro | Stringer Enterprise |
|---|---|---|---|
| Deployment | Self-hosted (DIY) | Managed cloud | Dedicated / Federal |
| Post-Quantum Crypto | Included in AVON | Included in Stringer Pro | Included in Stringer Enterprise |
| Continuous Verification | Included in AVON | Included in Stringer Pro | Included in Stringer Enterprise |
| ABAC Policy Engine | Included in AVON | Included in Stringer Pro | Included in Stringer Enterprise |
| Compliance Dashboard | Not included in AVON | Included in Stringer Pro | Included in Stringer Enterprise |
| Managed Agent Rollout | Not included in AVON | Included in Stringer Pro | Included in Stringer Enterprise |
| SSO / SCIM Integration | DIY | Included in Stringer Pro | Included in Stringer Enterprise |
| SLA | Community | 99.9% | 99.99% |
| Support | GitHub Issues | Email + Slack · 24/5 | Dedicated TAM · 24/7 |
| HSM Management | DIY | Shared | Dedicated |
Stringer is built on AVON.
AVON is the open-source post-quantum ZTNA platform Stringer operates. It's free, Apache 2.0 licensed, and stewarded by our team. If you have the operations talent and want to self-host, start there — and call us when you'd rather it be boring.
Explore AVON ↗