Thales study: Companies with a high level of AI maturity are better prepared for the quantum age

The rapid development of artificial intelligence and quantum computing is transforming not only business models but also the requirements for cyber security. Whilst AI is already shaping numerous business processes today, attention is simultaneously turning to the question of how existing cryptographic methods can be protected against the computing power of future quantum computers. A recent study by Thales shows that companies are increasingly viewing these two technologies as an interconnected challenge.

The “Thales Quantum & AI Threat Report 2026”, produced by 451 Research by S&P Global, concludes that 98 per cent of the organisations surveyed are now addressing the interplay between artificial intelligence and quantum computing. At the same time, the study shows that companies with a high level of maturity in the field of AI security, in particular, are significantly further ahead in their preparations for the quantum age.

Quantum security is becoming a strategic priority

The study makes it clear that quantum security is no longer regarded by many companies as a future issue. Rather, it is increasingly becoming a strategic priority within corporate security.

For instance, 61 per cent of the organisations surveyed regard so-called ‘Harvest Now, Decrypt Later’ (HNDL) attacks as the greatest risk associated with quantum computers. In such attacks, encrypted data is intercepted and stored today so that it can be decrypted in the future using powerful quantum computers.

Fifty-nine per cent of companies cite the development of prototypes and the evaluation of post-quantum cryptography (PQC) as the most important measures for preparing for this development. The aim of these new cryptographic methods is to secure data against future quantum computers as well.

AI pioneers are also investing in quantum security

There is a striking correlation between AI expertise and preparedness for quantum threats. Companies that are among the pioneers in the use and security of AI are significantly more likely to be actively engaged with quantum technologies than other organisations (33 per cent compared with 22 per cent).

Conversely, companies with a high level of maturity in the field of quantum technologies are more likely to invest in AI-specific security measures (89 per cent compared with 80 per cent).

According to the study, the key factor for success lies less in individual technology investments and more in establishing robust foundations. Companies with a high capacity for innovation often have well-developed strategies for data management, governance, cryptography and security architectures. These form the basis both for the secure use of AI and for preparing for the quantum age.

Joint development of both technologies

The study also shows that companies increasingly view the future development of AI and quantum computing as interlinked. More than half of those surveyed expect quantum computers to improve the performance of machine learning (57 per cent) and to accelerate the simulation of complex systems (54 per cent) in the future.

This also means that the requirements for information security are changing. In future, organisations will not only need to capitalise on the opportunities offered by both technologies, but also adapt their cryptographic foundations and make them more resilient.

Trust is becoming a competitive factor

According to Thales, trust, resilience and security are increasingly evolving from traditional compliance issues into strategic competitive advantages. Organisations that are modernising their security architectures today are simultaneously laying the foundations for future innovations.

“The quantum risk has entered a new phase,” explains Todd Moore, Vice President of Data Security Products at Thales. “The companies making the most progress are not necessarily those investing the most in quantum technology today. Rather, they are the companies that are establishing a more solid foundation in terms of data transparency, governance and resilience.”

Preparation rather than a wait-and-see approach

The study shows that many organisations have now taken concrete steps to prepare for the quantum age. Organisations that are already actively engaging with quantum technologies are significantly further ahead in key security initiatives than other companies.

For instance, 22 per cent of these organisations state that they are ahead of schedule in modernising their public-key infrastructure (PKI). Among companies with a lower level of preparedness, this applies to just 14 per cent. Similar differences are evident in certificate management, enterprise-wide key management and code-signing programmes.

According to Thales, the increasing use of AI in particular is accelerating the need for action.

“AI does not distract companies from the issue of quantum computing – rather, it accelerates the need to prepare,” says Todd Moore. “The more AI is integrated into business processes, the more important trust in the underlying cryptographic methods becomes. Companies that invest today in transparency, cryptographic agility and resilient security architectures are laying the foundations for future innovations.”

Cryptographic agility is gaining in importance

Rather than waiting for fixed timelines for powerful quantum computers, the study indicates that many companies are already relying on so-called ‘no-regret measures’. These include identifying data requiring special protection, analysing cryptographic risks, conducting initial tests with post-quantum cryptography, and building greater cryptographic agility.

Complemented by multi-layered security concepts and greater cryptographic diversity, these measures are designed to help organisations strengthen their resilience against both AI-enabled attacks and future quantum threats.

The “Thales Quantum & AI Threat Report 2026” is based on a survey of more than 3,100 organisations across 20 countries. The findings highlight that artificial intelligence and quantum computing must increasingly be considered in tandem. For organisations, the ability to securely manage both technological trends simultaneously is becoming a key component of their digital resilience.