Lightship Security
Lightship Security is a NIST-accredited Ottawa-based laboratory that conducts FIPS 140-3 cryptographic module validation testing, including post-quantum algorithms, for developers of cryptographic products targeting U.S. and Canadian regulated markets.
- Company typePrivate
- Founded2015
- HeadquartersOttawa, Canada
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Lightship Security does
Lightship Security is a privately held Ottawa-based professional services firm founded in 2015 that operates as a NIST-accredited cryptographic module testing laboratory. The company's core offering is FIPS 140-3 validation testing under the Cryptographic Module Validation Program (CMVP), which certifies cryptographic modules for deployment in U.S. and Canadian regulated markets. It has extended its scope to cover post-quantum cryptographic algorithms, positioning it for the federal migration to quantum-resistant cryptography.
The company engages directly with developers of cryptographic modules and security products that require federal certification. Documented clients include OpenSSL Corporation (with whom it jointly submitted OpenSSL version 3.5.4 for FIPS 140-3 validation in October 2025) and Quantum eMotion (whose Quantum Crypto Module validation engagement was announced in December 2025). Engagement scope spans both classical and post-quantum cryptographic implementations.
Lightship Security operates a sales-led, project-based business model, generating revenue through professional services fees tied to each validation engagement. Pricing is quote-based and not publicly disclosed. The firm is small, with 11-50 employees, focused on a narrow regulatory testing niche where its NIST accreditation functions as the primary barrier to entry. Geographic footprint is regional, covering the United States and Canada; no public funding rounds, M&A activity, or leadership changes are documented in the source material.
Lightship Security firmographics
Firmographics- Name
- Lightship Security
- Website
- https://lightshipsec.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Lightship Security is a NIST-accredited Ottawa-based laboratory that conducts FIPS 140-3 cryptographic module validation testing, including post-quantum algorithms, for developers of cryptographic products targeting U.S. and Canadian regulated markets.
- Ownership category
- akta.pro rank
Lightship Security industry classification
Industry- Product category
- Cryptographic Validation and Compliance Testing
- NAICS
- Testing Laboratories and Services (541380)
- SIC
- Services-Testing Laboratories (8734)
- akta.pro primary industry
- Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)
Keywords
Where Lightship Security is headquartered
LocationHeadquarters
- HQ city
- Ottawa
- HQ country
- Canada
- HQ region
- North America
Markets served
Lightship Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales
Revenue model
- FIPS 140-3 Validation Testing: Lightship Security generates revenue by providing cryptographic module validation testing services. As a NIST-accredited laboratory, the company tests and validates modules against FIPS 140-3 standards, charging fees for the certification process. Revenue is project-based, driven by client engagements such as the Quantum eMotion Quantum Crypto Module validation.
Go-to-market motion1 record
Distribution channels1 record
Lightship Security product offering
Product offeringCore offering
Lightship Security is a NIST-accredited Cryptographic Module Testing Laboratory providing FIPS 140-3 validation testing, cryptographic security assessment, and post-quantum cryptography readiness services for vendors developing cryptographic modules, libraries, hardware security modules, and embedded security products. The company sells testing, validation, and certification-support services to organizations that must achieve recognized cryptographic certification before selling into U.S. and Canadian regulated markets.
Product overview
Lightship Security operates as a NIST-accredited laboratory specializing in cryptographic module validation and security certification services. The company offers FIPS 140-3 validation testing services for cryptographic modules, working with organizations such as OpenSSL Corporation and Quantum eMotion to achieve compliance certification for their cryptographic products.
Differentiator
Problem solved
Functional benefit
Products and services
- FIPS 140-3 Cryptographic Module Validation Testing
Companies that use Lightship Security
Customer profileNamed customers1 record
Segments1 record
Ideal customer profiles2 records
Lightship Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature2 records
Lightship Security partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered core.
- Quantum eMotioncoreLightship Security was engaged by Quantum eMotion to conduct FIPS 140-3 validation of their Quantum Crypto Module. This engagement positions Quantum eMotion's quantum random number generator technology for deployment in regulated U.S. and Canadian markets.
- OpenSSL CorporationcoreLightship Security and OpenSSL Corporation jointly submitted OpenSSL version 3.5.4 for FIPS 140-3 validation to the Cryptographic Module Validation Program (CMVP). This partnership aims to establish a validated, standards-compliant cryptographic module supporting post-quantum cryptographic algorithms. The submission confirms that the code has passed testing and independent review.
Recent moves4 records
Expansion highlights4 records
Lightship Security competitors and assessment
Company assessmentBroad incumbents
- Leidos: Leidos operates large-scale cybersecurity and IT services for federal customers, including cryptographic and security testing capabilities — a broad incumbent that competes for government cryptographic validation work.
- Trustwave: Trustwave is a broad cybersecurity services firm with FIPS validation and security testing capabilities, serving regulated enterprise and government customers — comparable at the broader security services level.
- InfoGard Laboratories (Intertek): InfoGard is a NIST-accredited FIPS 140-3 testing lab now operating within Intertek's broader global testing and certification portfolio — a larger, diversified incumbent offering the same core validation services.
- NCC Group: NCC Group provides a wide range of cybersecurity testing, cryptographic evaluation, and assurance services globally — a larger incumbent with overlapping cryptographic and security testing capabilities.
Direct peers
- Acumen Security: Acumen Security is a cryptographic security laboratory providing FIPS 140-3 validation, Common Criteria, and related compliance testing — a focused direct peer in the same niche as Lightship.
- Cygnacom Solutions: Cygnacom operates an NVLAP-accredited security testing laboratory providing FIPS 140-3 validation and cryptographic module testing services directly comparable to Lightship's offering.
- atsec Information Security: atsec is a long-established NIST-accredited FIPS 140-3 testing laboratory offering cryptographic module validation, Common Criteria, and related security evaluation services — directly comparable in core service line and customer base.
- EWA-Canada: EWA-Canada is an Ottawa-based IT security testing laboratory offering FIPS 140-3 validation, Common Criteria evaluation, and cryptographic testing services — directly comparable given shared Canadian base and similar service mix.
- COACT Inc. COACT operates a NIST-accredited Cryptographic Module Testing Laboratory (CCTL) providing FIPS 140-3 testing services, making it a direct FIPS 140-3 validation peer to Lightship.
- Corsec Security: Corsec specializes in FIPS 140-3 validation, Common Criteria certification, and security compliance consulting for cryptographic and security products — a near-identical service offering to Lightship Security.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat2 records
Key risks5 records
Key highlights5 records
Customer concentration
Lightship Security social profiles
Digital presenceLightship Security compliance and trust
Trust signalCompliance2 records
Lightship Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Lightship Security leadership team
Management profileNumber of profiles
Lightship Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Lightship Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Lightship Security
What does Lightship Security do?
Lightship Security is a NIST-accredited Cryptographic Module Testing Laboratory providing FIPS 140-3 validation testing, cryptographic security assessment, and post-quantum cryptography readiness services for vendors developing cryptographic modules, libraries, hardware security modules, and embedded security products. The company sells testing, validation, and certification-support services to organizations that must achieve recognized cryptographic certification before selling into U.S. and Canadian regulated markets.
When was Lightship Security founded?
Lightship Security was founded in 2015. It employs 11 to 50 people.
Where is Lightship Security based?
Lightship Security is headquartered in Ottawa, Canada, in the North America region.
How does Lightship Security make money?
One revenue line is on record: FIPS 140-3 Validation Testing.
Who are Lightship Security's main competitors?
Broad incumbents on record are Leidos, Trustwave, InfoGard Laboratories (Intertek) and NCC Group. Direct peers are Acumen Security, Cygnacom Solutions, atsec Information Security, EWA-Canada, COACT Inc. and Corsec Security.
Does Lightship Security have an API?
No public API is recorded for Lightship Security.
What industry is Lightship Security in?
Lightship Security's product category is Cryptographic Validation and Compliance Testing. Its primary akta.pro industry code is BPAKAHAG, Vulnerability Assessment, Security Audits & Compliance Testing. Its NAICS code is 541380 and its SIC code is 8734.