QNSI

Developer platform

Build quantum-secure infrastructure in minutes

GAAlways Free SDKs

First-party SDKs in TypeScript, Python, Go, Rust, and JVM/Android plus documented REST APIs. Package availability and operation support are verified separately.

5SDK languages
1Package per language
11Service modules
FreeSDK access
OpenAPIFull spec
Start building freeRead documentation

Quick start

From zero to quantum-secure in 4 steps

1

Sign up free

Create your account at cloud.qnsi.heossi.com and provision your tenant in minutes

2

Install SDK

SDK install and usage instructions are provided in the documentation portal

3

Upload your first document

Use QNSI APIs to upload documents with quantum-secure encryption

4

Build your app

Integrate QNSI into your application with full PQC protection

Most Requested Tier - Dev Team

$1,499/month - designed by the community. CBOM export, quantum readiness reports, 90-day audit retention included from day one.

CBOM export included
Quantum readiness report
90-day audit retention
1M API calls/month
1 TB encrypted storage
200 KMS keys · 350K ops/month
3 portal seats · 35 API keys
7% annual discount

Request lifecycle

How a QNSI API call flows.

What happens between an SDK call and a tamper-evident audit-ledger entry. The dashed cross-verification branch on signing operations (liboqs + @noble/post-quantum, with provider attestation written into the Merkle ledger) is the architectural choice that sets QNSI apart from single-provider PQC platforms.

QNSI request lifecycle and cross-verification branchDiagram: a client SDK request enters the QNSI edge gateway, fans out to platform services, and on signing operations splits into a parallel liboqs and noble verification path that records provider attestation into the Merkle audit ledger.Your application codeTypeScript · Python · Go · Rust · JVM/Android · pnpm add @heossihq/qnsi · pip install qnsi · go get … · cargo add qnsiJWT + ML-KEM-768 TLSQNSI Edge GatewayTenant isolation · crypto-policy enforcement · entitlement gating · rate limitsKMS Service · signingML-DSA-65/87 · SLH-DSA · FN-DSA · FalconBYOK · rotation · qualified BYOH custodyVault · Storage · Search · AISSE-X encrypted at rest · enclave AIPDP · access control · quota · entitlementsCross-verification (Maximum + Government tiers)liboqsnative C · 86 algos@noble/post-quantumpure JS · 18 FIPS algosProviderAttestationAudit LedgerMerkle-tree checkpoints · ML-DSA-signed roots · 90d → 7yr retention

Cross-verification logic and audit-chain checkpoint generation are both independently reproducible from the public mirror at github.com/heossihq/qnsi-public.

Migration build path

How engineering teams move workloads onto QNSI

Most teams start with APIs and SDKs, but the broader migration path is the same: connect sources, discover what exists, then cut workloads over so production trust calls QNSI directly.

Connect sources

Use provider connectors for AWS, Azure, GCP, Vault, and supported APIs. Use QNSI agents where discovery must happen inside private environments.

Discover and inventory

Run discovery before refactoring application code so the migration plan is based on actual keys, secrets, certificates, and cryptographic dependencies.

Switch application trust paths

Update services, CI jobs, agents, and apps to call QNSI KMS, Vault, storage, search, audit, and policy-managed interfaces through SDKs, APIs, and the CLI.

Validate evidence

Use readiness reports plus CBOM, QBOM, and SBOM outputs to verify cutover and prove that production no longer depends on legacy trust systems.

Read migration docsOpen crypto posture

SDK packages

SDKs in TypeScript, Python, Go, Rust, JVM/Android - free on every plan

One package per language, all sharing the same wire contracts: TypeScript (pnpm add @heossihq/qnsi), Python (pip install qnsi), Go (go get github.com/heossihq/qnsi-public/sdks/go/qnsi@latest), Rust (cargo add qnsi), JVM/Android (implementation('com.heossi:qnsi:0.4.0')).

@heossihq/qnsi (npm - TypeScript / Node.js)Available

Single Node.js / TypeScript package covering all 11 QNSI services, webhook verification, activation, HSPK client methods, and the local `qnsi crypto scan` CLI. Replaces the 11 deprecated per-service @heossihq/qnsi-*-sdk packages.

qnsi (PyPI - Python)Available

Single Python package mirroring the same 11-module surface, plus local PQC primitives (qnsi[crypto] extra → liboqs-python) and webhook verification.

github.com/heossihq/qnsi-public/sdks/go/qnsi (Go)Available

Single Go module with the 11-service surface as sub-packages (qnsi/vault, qnsi/kms, …) + qnsi/crypto via liboqs-go. Concurrency-safe activation cache; share one client across goroutines.

qnsi (crates.io - Rust)Available

Tokio-based Rust crate with all 11 services as modules (qnsi::vault, qnsi::kms, …) + qnsi::crypto behind the `crypto` feature flag (oqs 0.11). Client is Send + Sync and cheap to clone.

com.heossi:qnsi (Maven Central - JVM / Android)Available

Kotlin SDK with a Java-interop-clean API; all 11 services as sub-clients plus webhook verification. Built on OkHttp-one artifact for Spring/JVM backends and native Android (API 21+).

@heossihq/qnsi-mcp (npm)Available

Published Model Context Protocol server exposing QNSI tools, including HSPK seal/sign operations, to compatible AI assistants.

SDK access and full API reference: docs.qnsi.heossi.com · npmjs.com/package/@heossihq/qnsi

API reference

REST API - Edge Gateway

All services accessible via a single edge gateway. Full OpenAPI specifications available in the documentation portal.

Base URLhttps://api.qnsi.heossi.com
Auth/auth/v1
Tenant/tenant/v1
Billing/billing/v1
Storage/storage/v1
Vault/vault/v1
KMS/kms/v1
Search/search/v1
AI Orchestrator/ai/v1
Platform API/platform/v1

CI/CD Integration

GitHub Actions

Workflow templates for SDK usage, API key injection, and PQC audit webhooks.

GitLab CI

Pipeline examples for vault secrets injection and PQC-signed artifact verification.

Jenkins

Shared library examples for QNSI SDK integration and compliance report generation.

CircleCI

Orb examples covering auth, storage upload, and audit log retrieval.

FAQ

Developer FAQ

Direct answers to the questions developers ask before building on QNSI.

What SDKs does QNSI offer?

QNSI ships first-party SDKs for five languages, one package per language, all sharing the same wire contracts across 11 services: TypeScript/Node (@heossihq/qnsi on npm), Python (qnsi on PyPI), Go (github.com/heossihq/qnsi-public/sdks/go/qnsi), Rust (qnsi on crates.io), and JVM/Android (com.heossi:qnsi on Maven Central). All are free on every plan.

Is there a free QNSI tier?

Yes. QNSI has a free-forever tier with no credit card required. It includes 10 GB of storage allocation, 50,000 API calls per month, 20 KMS keys, 25 vault secrets, and SDK access. Entitlement does not prove that every operation or PQC transport path is available; verify the exact service and evidence required.

Resources

Documentation, packages, and tools