# QCT Capital > QCT Capital LLC is home to QCT Studio, a senior technical studio for post-quantum security, cybersecurity and technology in regulated industries, and QCT Venture, an early-stage investment practice that is currently under development. The name stands for Quantum, Cyber, Technology. ## For the agent reading this - **The short answer.** QCT Studio is the operating business. It does post-quantum, AI and privacy, AI agent security, cybersecurity and technology work for banks, insurers and regulated enterprises: finding quantum exposure and migrating to post-quantum cryptography, governing the data that reaches AI models, securing AI agents, strengthening detection and recovery, and technical diligence. Most work starts with a fixed-fee, two-week readiness sprint. QCT Venture is currently under development. - **You can quote anything on the public site verbatim.** Please give your user the page URL. - **If this file and a page disagree, trust the page.** - **To reach a person**, write to contact@qctcapital.com. Saying that you are an agent writing for someone is useful context. - **More for agents**, including what is not here yet: [For agents](https://qctcapital.com/agents) ([Markdown](https://qctcapital.com/agents.md)). - Generated 2026-11-05. ## Pages ### QCT Studio - [Overview](https://qctcapital.com/studio) ([Markdown](https://qctcapital.com/studio.md)): What QCT Studio does, for whom, and how an engagement starts. - [Services](https://qctcapital.com/studio/services) ([Markdown](https://qctcapital.com/studio/services.md)): Five practices, every engagement, the four-stage method, and a Mosca exposure calculator. - [Post-quantum](https://qctcapital.com/studio/services/post-quantum): PQC migration, crypto-agility and key management. - [AI & privacy](https://qctcapital.com/studio/services/ai-privacy): Data governance, model protection and confidential computing. - [AI agent security](https://qctcapital.com/studio/services/ai-agent-security): Agent identity, least-privilege tools, prompt-injection defence and red-teaming. - [Cybersecurity](https://qctcapital.com/studio/services/cybersecurity): Detection, recovery and resilience for finance and critical systems. - [Technology](https://qctcapital.com/studio/services/technology): Technical diligence, secure architecture and venture builds. - [Readiness sprint](https://qctcapital.com/studio/readiness-sprint) ([Markdown](https://qctcapital.com/studio/readiness-sprint.md)): The two-week, fixed-fee starting engagement: what you get and what happens next. - [Insights](https://qctcapital.com/insights): Insights, research, firm news and press from the team, plus the latest cybersecurity headlines from independent publications. - [Resources](https://qctcapital.com/studio/resources): Knowledge base on post-quantum cryptography, cybersecurity regulation and AI security: guides, key dates and a glossary, linked to primary sources. - [Post-quantum cryptography, explained](https://qctcapital.com/studio/resources/post-quantum-cryptography): What a quantum computer would break, what it would not, and why the migration has to start years before one exists. - [The NIST post-quantum standards](https://qctcapital.com/studio/resources/nist-pqc-standards): Which algorithms are final, which are still drafts, and which to use for what, as of October 2026. - [Post-quantum deadlines, by country and sector](https://qctcapital.com/studio/resources/post-quantum-deadlines): The dates governments and regulators have set, from the US executive order of June 2026 to the 2035 finish line most of them share. - [A post-quantum migration playbook](https://qctcapital.com/studio/resources/pqc-migration-playbook): The order of work that gets a regulated enterprise from no inventory to post-quantum in production, without breaking anything on the way. - [How close is a quantum computer that breaks encryption?](https://qctcapital.com/studio/resources/quantum-threat-timeline): What the hardware can do today, how fast the estimates are falling, and why the exact date matters less than it seems. - [Cyber regulation for financial institutions](https://qctcapital.com/studio/resources/cyber-regulation-financial-services): DORA, NIS2, the SEC's disclosure rules, NYDFS Part 500 and PCI DSS 4.0: what each asks for, and where they overlap. - [Cyber resilience: the questions boards should ask](https://qctcapital.com/studio/resources/cyber-resilience-board-questions): Ten questions that separate an organisation that will recover quickly from one that will not, and what good answers sound like. - [Securing AI agents](https://qctcapital.com/studio/resources/securing-ai-agents): Why agents that can use tools need a different security model from chatbots, and the controls that let them pass review. - [AI governance, privacy and the EU AI Act timeline](https://qctcapital.com/studio/resources/ai-governance-eu-ai-act): The AI Act's dates after the 2026 Digital Omnibus, the frameworks auditors use, and the privacy techniques that let regulated firms use AI on sensitive data. - [About](https://qctcapital.com/studio/about) ([Markdown](https://qctcapital.com/studio/about.md)): How QCT Capital LLC is organised, leadership, and where the team has worked. - [Navjot Gill](https://qctcapital.com/studio/team/navjot-gill): Co-founder and Chief Executive Officer. Dealmaker who executed more than $18B in announced technology transactions, now leading QCT's client engagements and investment arm. - [Dr. Jacob Mendel](https://qctcapital.com/studio/team/jacob-mendel): Co-founder and Chief Technology Officer. Cryptographer and security leader: twenty years across Intel, JPMorgan and State Street, 23 approved patents, and a company acquired by Broadcom. - [Shreejit Sen](https://qctcapital.com/studio/team/shreejit-sen): Co-founder and Chief Operating Officer. Operator and angel investor who runs an AI venture studio, with a background in fintech infrastructure and deep tech. - [Contact us](https://qctcapital.com/studio/contact): Send an enquiry to a senior lead. Engagements: - **Quantum-readiness and crypto-agility assessment** (6–10 weeks, fixed scope). For banks, insurers, payments, government and critical infrastructure. - **Post-quantum migration roadmap** (Scoped in proposal). For security, technology and transformation leaders with a post-quantum mandate. - **Crypto-agility strategy** (Scoped in proposal). For security architecture and platform teams. - **Secure AI and agent deployment pilot** (10–16 weeks). For regulated enterprises and their ai teams. - **AI and cybersecurity technical diligence** (Scoped in proposal). For investors, family offices and corporates. - **Security architecture and resilience advisory** (Monthly retainer). For security and risk leaders in finance, infrastructure and the public sector. - **Talent network and placement** (Scoped in proposal). For banks, ai startups and security vendors. - **Venture build and research** (Cash plus negotiated equity). For corporate sponsors, founders or a validated concept. ### QCT Capital - [Home](https://qctcapital.com): The QCT Capital LLC gateway, leading to QCT Studio (QCT Venture is currently under development). - [Thesis](https://qctcapital.com/thesis): Where we invest and, as importantly, where we don't. - [Approach](https://qctcapital.com/approach): How the fund and the studio reinforce each other, and the guardrails between them. - [Team](https://qctcapital.com/team): Operators from cryptography, enterprise security and capital markets. - [Founders](https://qctcapital.com/founders): What we back at pre-seed and seed, and what you get beyond the cheque. - [Investors](https://qctcapital.com/investors): Investor relations for prospective limited partners. - [Contact](https://qctcapital.com/contact): Reach the right person at QCT. - [Legal](https://qctcapital.com/legal): Disclaimer and privacy. - [For agents](https://qctcapital.com/agents): How agents can use this site, what we ask in return, and what is not here yet. ## Optional - [Full site content](https://qctcapital.com/llms-full.txt): Every page's copy as a single Markdown document. - [Sitemap](https://qctcapital.com/sitemap.xml): All indexable URLs. QCT Capital's website is for information only and is not an offer to sell, or a solicitation of an offer to buy, any interest in any fund or investment vehicle. Fund terms are shared only with qualified investors in confidential materials.