Sitehop Launches SAFEcore Edge: Post-Quantum Encryption Built for OT and Critical Infrastructure

UK cybersecurity firm Sitehop has launched SAFEcore Edge, described as the world's smallest post-quantum encryption device, purpose-built to protect operational technology (OT) networks in energy, utilities, and critical national infrastructure. The device made its public debut at CYBERUK 2026, the UK government's flagship cybersecurity conference, where it attracted significant interest from energy and utilities operators.

For the GCC's oil and gas sector, power utilities, and water infrastructure operators, the timing of this launch is directly relevant. The region's critical infrastructure runs on SCADA systems and legacy OT networks that were built for reliability and longevity, not modern cybersecurity standards. Applying conventional enterprise security tooling to these environments is frequently impractical: the latency requirements are unforgiving, the hardware is old, and many facilities are geographically remote. SAFEcore Edge is designed to address exactly that gap.

What SAFEcore Edge Does

SAFEcore Edge delivers hardware-enforced post-quantum encryption directly at the network edge, securing communications between remote operational technology and central control systems. According to Sitehop, the device provides up to 1,000 times lower latency than software-only encryption solutions, which is a meaningful differentiator in environments where any communication delay can affect process control integrity.

The device supports IEC 62443 compliance, the international standard for industrial cybersecurity, and is designed to secure connectivity for distributed assets including wind farms, substations, and offshore platforms. It protects supervisory control and data acquisition (SCADA) systems, a class of infrastructure that has become a persistent target for nation-state threat actors operating across the Gulf region and broader MENA.

"Operational technology environments present unique security challenges as legacy systems, remote locations and the need for ultra-low latency mean that conventional security solutions simply can't keep up. SAFEcore Edge is designed specifically for these environments, delivering hardware-enforced post-quantum encryption without compromising the performance that operational systems demand." - Ben Harper, CTO, Sitehop

Why Post-Quantum Matters Now for Critical Infrastructure

Post-quantum cryptography has moved from a theoretical concern to an active procurement priority for governments and critical infrastructure operators globally. The threat model is well understood: adversaries, including well-resourced nation-states, are collecting encrypted communications today with the intent of decrypting them once sufficiently powerful quantum computers become available. This approach is particularly dangerous for long-lived infrastructure, where data transmitted today may still be sensitive in 10 or 15 years.

For the GCC, where energy infrastructure underpins both national economies and geopolitical influence, the stakes are elevated. The Saudi National Cybersecurity Authority and the UAE Cyber Security Council have both signalled the importance of preparing critical infrastructure for the post-quantum era. The US National Institute of Standards and Technology finalised its first set of post-quantum cryptographic standards in 2024, and GCC regulators are expected to reference these frameworks in updated compliance guidance for the energy and utilities sectors.

"As cyber threats escalate, securing the communications that underpin operational networks has never been more important. SAFEcore Edge is British-engineered sovereign technology that brings post-quantum encryption to every point on the network, however remote, protecting the institutions and systems that people and businesses depend on every day." - Melissa Chambers, CEO, Sitehop

Deployment and Current Status

SAFEcore Edge is designed in Sheffield and manufactured in the North of England. It is already being trialled by a leading international IT services provider, with customers across multiple sectors currently exploring applications. The device is part of Sitehop's broader SAFE Series platform, which is deployed with a global tier-one telecommunications carrier across seven countries, as well as with government and defence organisations.

The focus on OT security reflects a broader shift in how the cybersecurity industry is prioritising critical infrastructure protection. Recent advisories from CISA on industrial control systems and findings from regional incident responders confirm that OT networks are increasingly targeted in sophisticated, sustained campaigns. The ability to deploy quantum-resistant encryption at the edge, without requiring legacy system replacement or high-bandwidth connectivity, addresses a gap that has been difficult to close through software-only approaches.

What This Means for GCC Security Teams

For GCC security and infrastructure teams assessing post-quantum readiness, SAFEcore Edge enters a market where hardware-enforced solutions at the OT layer have been notably scarce. The device's compact form factor and low-latency design make it compatible with the remote, bandwidth-constrained environments that define much of the region's energy infrastructure, from offshore platforms in the Arabian Gulf to remote substations across the wider MENA network.

Whether SAFEcore Edge gains traction in the region will depend in part on how quickly regulators formalise post-quantum requirements for critical infrastructure operators, and how procurement timelines align with the growing urgency being signalled by national cybersecurity authorities. Given the pace at which quantum computing capabilities are advancing, security teams that begin evaluation now are better positioned than those waiting for mandated compliance deadlines.