IonQ, the quantum computing company, has agreed to acquire Elisity, a zero-trust and microsegmentation company founded in 2019. The all-stock deal is valued at up to $1.3 billion. IonQ announced it on October 12, 2026. Its Form 8-K filing with the Securities and Exchange Commission shows that the parties signed the merger agreement three days earlier, on October 9. The companies expect the deal to close in the fourth quarter of 2026, subject to customary conditions that include required regulatory approval.

IonQ says the acquisition would pair Elisity's Zero Trust platform with its own post-quantum cryptography (PQC) and quantum key distribution (QKD) capabilities.

What the filing says

The 8-K sets out the deal terms in more detail than the press release:

  • Closing consideration: IonQ shares with a value of $1.15 billion, reduced by leakage Elisity incurs after July 31, 2026, excluding customary permitted-leakage exceptions.
  • Share pricing: The share count is set by IonQ's volume-weighted average price over the 20 trading days ending before the third business day prior to closing. That price is capped at $49.61 and floored at $33.07 per share.
  • Earnout: Up to $150 million in additional shares, tied to Elisity revenue milestones from August 1, 2026 through January 31, 2028, an 18-month measurement window.
  • Retention: A pool of restricted stock units worth $100 million (divided by the same share price), granted after closing and vesting over four years. The filing says this pool is in addition to the merger consideration.
  • Structure: The merger runs through Espresso Acquisition Sub, Inc., a wholly owned IonQ subsidiary. Fortis Advisors LLC acts as representative for Elisity's securityholders.
  • Outside date: Either party may terminate the agreement if closing has not occurred by January 7, 2027, subject to certain conditions.

IonQ's press release says the "up to $1.3 billion" valuation includes the earnout opportunity; added to the 8-K's closing consideration, the earnout brings the total to that figure. The release also says Elisity will continue serving customers under its current leadership, including CEO James Winebrenner.

What Elisity sells

CyberScoop describes Elisity's product as "a software policy layer that governs which users, devices, workloads and AI agents can communicate across a network." According to CyberScoop, the platform already treats AI agents and other non-human identities as subjects of access policy, and Elisity has joined the Open Secure AI Alliance, whose priorities include least-privilege rules for sanctioned agents.

In IonQ's announcement, Elisity is credited with more than 100 global customer deployments, with doubling its revenue and customer base year over year, and with "zero churn among deployed customers." These are company claims and have not been independently verified. IonQ's release puts the microsegmentation market at more than $10 billion.

The post-quantum pitch

The deal is built around the expected arrival of "Q-Day," the point at which a quantum computer could break widely used public-key encryption. "Q-Day is coming much faster than predicted," Niccolo de Masi, IonQ's chairman and CEO, said in the company's press release. In the same release, Winebrenner said, "Our customers need to prioritize post-quantum cryptography initiatives."

According to CyberScoop, Elisity plans to "extend its IdentityGraph product with cryptographic inventory and risk information," which would let customers "rank post-quantum upgrades by business risk." This is a roadmap item, not a shipping feature.

CyberScoop also gave the policy context. A Trump administration executive order moved the federal government's PQC migration target from 2035 to 2030, and Google and other companies, which CyberScoop does not name, have moved their own targets to 2029. Describing a phased migration, Winebrenner told CyberScoop: "You won't replace every legacy system at once."

What is still open

  • Closing still depends on required regulatory approvals and the other conditions in the 8-K, including listing approval on the NYSE for the shares issued at closing.
  • The cryptographic-inventory feature has no release date in the cited reporting.

What It Means for Defenders

  • Elisity customers: Before the deal closes, review your contract's change-of-control, data-handling, and support terms, and ask your account team who will own roadmap commitments after the acquisition.
  • Start your own cryptographic inventory now. Record which systems, certificates, protocols, and keys use which algorithms, and who owns each one, rather than waiting for a vendor tool.
  • Prioritize, don't rip and replace. Rank systems by data sensitivity, how long that data must stay confidential, and how hard each system is to upgrade, then map that ranking against your own migration milestones.
  • Restrict access to legacy systems. For systems that can't be upgraded soon, limit which identities and workloads, including AI agents, can reach them, whichever segmentation product you use.
  • Ask for evidence. When evaluating microsegmentation or PQC vendors, request customer references and proof-of-concept results rather than relying on self-reported growth figures.

Sources