Executive Summary

CyberQuanta — The Future of EV Charging

An EV charging infrastructure platform built with post-quantum cryptography, EU Cyber Resilience Act compliance, and end-to-end hardware root of trust. 9 repositories, hardware-to-cloud integrated architecture.

9Repos
~7,300Tests
8+Standards
PQCPost-Quantum
CRACompliant
Vision
Why CyberQuanta?

EV charging infrastructure is critical national infrastructure. Current solutions have serious gaps in cybersecurity, quantum threats, and regulatory compliance. CyberQuanta is designed to fill this gap.

🔐

Post-Quantum Security

One of the first platforms implementing NIST FIPS 203/204 standardized Kyber-1024 + Dilithium3 PQC crypto in EV charging. Hybrid TLS 1.3 ensures both classical and quantum security. Proactive protection against harvest-now-decrypt-later attacks.

🇪🇺

CRA Compliance Framework

EU Cyber Resilience Act (2024/2847) becomes mandatory in 2027. CyberQuanta implements the 13-article compliance framework. SBOM pipeline, coordinated vulnerability disclosure, 24h ENISA notification, 5-year update commitment.

⛓️

Hardware Root of Trust

4 dedicated security chips: ATECC608B HSM (ECDSA P-256), SLB9672 TPM 2.0, MH1905 security co-processor, STM32G474RE safety MCU. Strong defense against software attacks through multi-layer hardware security. (Hardware integration is in progress.)

🌍

End-to-End Platform

From hardware to cloud, firmware to dashboard, monitoring to SBOM — a unified platform. 9 repositories working together to create a single integrated EVSE solution. No vendor lock-in — open source based (Yocto, liboqs, RAUC).

Market Opportunity
Growing EV Charging Market
$103B
2030 Market Size

Global EV charging infrastructure market. CAGR 25%+ (BloombergNEF)

3.5M
2030 EU Charge Points

AFIR regulation target. ~630K existing in 2024.

2027
CRA Mandate Year

All IoT/connected devices must be CRA compliant. Early compliance = competitive advantage.

Critical Market Gap

Most existing EV charging solutions: (1) No post-quantum crypto support, (2) Missing CRA compliance framework, (3) No SBOM/VEX pipeline, (4) Weak or no hardware root of trust. CyberQuanta covers all 4 critical areas. Being ready before the 2027 CRA mandate, the platform has a significant first-mover advantage.

Competitive Advantages
6 Key Differentiators
01

PQC First Mover

NIST FIPS 203 (Kyber-1024) + FIPS 204 (Dilithium3) — one of the first PQC-enabled platforms in EV charging. Backward compatible with Hybrid TLS 1.3.

02

CRA Ready

Full CRA compliance framework before 2027 EU mandate. 13 articles, SBOM pipeline, coordinated vulnerability disclosure, ENISA reporting templates.

03

Quad Hardware Security (Planned)

ATECC608B HSM + SLB9672 TPM 2.0 + MH1905 security co-processor + STM32G474RE safety MCU. Multi-layer hardware security designed in. Hardware integration planned with real boards.

04

~7,300 Tests

Backend 4,888 pytest, firmware ~1,800 Unity, Dashboard 213 Vitest, a11y 16, Hodet FW 431, Sentinel-UI 56, Control Center 17, Lite Wallbox 40. Automated CI/CD.

05

Open Source Based

Yocto Linux, liboqs, RAUC, CycloneDX — no vendor lock-in. Community contribution, transparent security, independent audit capability. Forkable, extensible platform.

06

8+ Standards Compliance

IEC 61851, ISO 15118, OCPP 2.0.1, MID/Eichrecht, FIPS 140-2, MISRA C:2012, OCPI 2.2.1, IEC 62443. Proven with 301 compliance tests.

Test Ecosystem
~7,300 Tests Ecosystem-wide
Backend API
4,888
0 Failing · ~95% Coverage
EVSE Firmware
~1,800
Unity Framework · QEMU tested
EVSE Dashboard
213
Vitest + a11y 16
Hodet Firmware
431
All Binaries Pass
Sentinel-UI
56
Vitest · React 18
Lite Wallbox
40
Vitest · React 19
Control Center
17
Vitest · React 18
Compliance
112
7 Standards
Honest Assessment
Transparent Engineering Status

CyberQuanta has built a strong software foundation. However, production readiness requires hardware acquisition, physical integration, and certification. Below is the real status presented transparently.

~62%
Code Written
~500K lines source code, 9 repos
~45%
Functional
Tested and working modules
~24%
Production Ready
Ready for deployment

What's Needed for Production

1) Real hardware acquisition (~$1,000-1,500) — i.MX8M Plus EVK, STM32 NUCLEO, ATECC608B dev kit, EV simulator. 2) Firmware completion and physical integration (3-5 months). 3) Field testing and certification — IEC 61851, MID/Eichrecht, CE (3-4 months). Estimated total: 12-18 months. Backend API, SBOM pipeline, test infrastructure and CRA framework are production quality.

Roadmap
Path to Production
Phase 1 ✓

Architecture, Backend, Test Infra

Phase 2 ✓

PQC, CRA, SBOM, Dashboard

Phase 3 →

QEMU Integration, Firmware

Phase 4

Real Hardware (3-5mo)

Phase 5

Certification (3-4mo)

Explore the Details

Review technical metrics, live demos, investment opportunity and more.