World · Cloud Security
Cloudflare launches post-quantum GeoKey Manager in closed beta
Source announcement: 2026-10-23 · Event date: 2026-10-23
On 23 October, Cloudflare announced a closed beta of post-quantum GeoKey Manager for its Data Localization Suite. The system focuses on making protected decryption keys usable only by authorized servers in a selected geography. The announcement is particularly relevant to organizations with regional data-processing requirements.
Restricting where a key can be used
The company says the new design combines ML-KEM-768 and X25519 in a hybrid protection scheme. The aim is to strengthen key protection against the risk of encrypted data collected today being decrypted by powerful quantum computers later. It is not a claim that the product eliminates every security problem.
GeoKey Manager controls where keys can be unwrapped and used. Traffic routing and inspection are handled by separate Regional Services components. Cloudflare plans general availability for the first quarter of 2027; integration of the new post-quantum design into the existing CDN capability is being developed separately. Closed beta does not mean general availability to all customers today.
Quad Bilişim commentary
The announcement makes the distinction between a key’s location and the location of data processing clearer. A cryptographic regional boundary is an important technical layer, but does not by itself establish where all data flows occur or prove regulatory compliance. The closed-beta scope is therefore a central detail of the news.