KXCOby Knightsbridge

Company

Built by Knightsbridge for institutions that need to show their records are intact

KXCO builds post-quantum infrastructure for corporates, licensed institutions and AI agents.

The company on file

The UK company on file is Knightsbridge Financial Ltd, England & Wales, Company No. 15684975, incorporated 27 April 2024. LEI 213800TMP5DQFDKOZ549. ICO registration ZC182579.

KXCO takes custody of no customer assets and holds no financial licence.

Request a briefing

The team behind the infrastructure

  • Shayne Heffernan Ph.D. Claude Partner Badge: Claude Code, issued by Anthropic Founder & Chief Executive Officer. With over 40 years of experience in global capital markets, venture capital, and emerging technologies, he specialises in digital asset strategy, M&A, and cross-border financial structures. A Ph.D. economist with a strong Asia-Pacific focus, Dr. Heffernan has guided several companies through successful IPOs that reached billion-dollar market capitalisations.
  • John Heffernan. Claude Partner Badge: Claude Code, issued by Anthropic Head of Engineering & Security. Co-inventor on Ireland patent application S2025/0544, the identity-verified record anchoring the platform is built on. Co-author of the KXCO post-quantum package family published on npm, and security contact of record for coordinated vulnerability disclosure. Economics degree, University of Buckingham.
  • Steve Chaykowsky. Senior Managing Director, Capital Markets. 15 years proprietary trading and banking. Technical market advisor for Mellon Bank, BlackRock, and JP Morgan Asset Management. Top 10 Visionary Leaders 2026.
  • Cristin Isaacson. Director of U.S. Government Affairs. Leads KXCO's U.S. government strategy: relationships with federal, defence and state agencies, and the procurement pathways into them. 14 years in federal sales and contracting. Prior offices: Vice President, Federal & Government Fleet at Major Police Supply for federal and state agencies and the military; Federal Government Sales Director at General Sales Administration.
  • Dan Frasco. Financial Services Technology. 20+ years at Fidelity Investments in technology and infrastructure leadership. Modernised DTCC core clearing supporting $1.4T in annual clearing. BA Computer Science & Economics, Williams College.
  • Vincent Song. VP Asia Pacific & Digital Assets. Vice Chairman, Hong Kong Blockchain Association, a current role. Prior offices: Global VP at XT.COM, scaled to 9M users and $1B+ daily volume; Director, Lenovo-IBM Asia Pacific.
  • David Chlapowski. VP Investment Banking & Blockchain. Serial entrepreneur. Former Senior Vice President at Bear Stearns with extensive Wall Street investment banking experience. Expertise in cloud infrastructure and digital forensics.
  • Lanny Cohen. Technology & Enterprise. Former CEO North America, Group CTO, and Chief Innovation Officer at Capgemini. Vice Chair and Chief Portfolio Officer at iByond. Former Partner at EY.
  • Grant Leech. Managing Director, UK & EU. 20+ years building and leading fintech businesses. Law Degree, Higher Diploma in Computer Science, Graduate Diplomas in Finance & Accounting. Led M&A strategy across UK and Ireland.
  • Sean O'Coiligh. Cybersecurity. 30+ years in cybersecurity. Founded the Pen Test Managers Group at FS-ISAC. Prior offices: led Offensive Cyber Security at DTCC's Cyber Threat Fusion Center for over a decade; U.S. Marine Corps, Signal Intelligence.
  • Ramadan Ameen. VP BlackRock & Sovereign Capital. Former Relationship Manager, BlackRock, Official Institutions Group. Raised $1.3B from sovereign wealth funds, central banks, and pension funds. MBA, Columbia.
  • Martin Etlis. Enterprise Architecture. Oracle. EY. Deloitte. PA Consulting. Delivery lead for Nordea and Svensk Exportkredit. CEO, Creavi Holding AB.
  • Christopher Belanger. Director of Strategic Capital & Partnerships. Represents KXCO to corporates, institutions, government and high net worth individuals. Based in Boston, with eight years across direct sales, B2B, management and financial services.
  • Keral Patel. Technologist, Head of KXCO Team India. Built KXCO Agent Lens, the browser extension that grades any site on agent legibility against llms.txt, JSON-LD, security.txt and MCP manifest signals, published to the Chrome Web Store in 2026. A restless spirit blessed by the Gods of Curiosity.
  • Michael English. VP Government Strategy & Operations. Michael is an Australian Army veteran and a strategy and operations executive, with experience across telecommunications, Google, fintech and payments, healthcare technology, data and SaaS. Across Asia-Pacific, Michael has led transformation, technology and complex operations in both multinational companies and venture-backed start-ups.
  • Ramu Veerappan. VP Biotech & Institutions. Founder, Chairman and CEO of Sapphire Pharma Inc, a specialty pharmaceutical company in infectious diseases, autoimmune disorders and women's health. Founder and Principal of Tydings Capital LLC, investing in technology, healthcare and financial services. Two decades consulting to the pharmaceutical, biotechnology and medical device industries. Prior office: President, Mtech Consulting Group, whose clients include Sanofi, BMS, J&J, Pfizer, Roche and Merck. BS, Rutgers University.
  • Raj Tiwari. Semiconductors & Industrial Markets. Raj has led commercial development for multinational companies and organisations such as FMC USA, the Global Electronics Association, Ferro Speciality Chemicals, Aditya Birla and SAHA. He specialises in creating new factories and new markets for them around the world. He has also served on the boards of several start-ups in finance and web3. He earned his MSc in Banking and Finance at Leeds University Business School.
  • Manish Jha. Aerospace & Defence. Manish operates Logicdata Communications and has represented Kratos Communications SAS in India. He has led the sales and delivery of Satcom systems for customers including ISRO, DRDO, HAL, Tata Sky, ONGC, BSNL, Hughes and General Dynamics. His experience covers government bids, international supplier coordination, installation, commissioning and support. At KXCO, he develops Round Table opportunities with Indian space, defence and government institutions.

Post-quantum infrastructure built for institutional deployment

KXCO is a UK and US software company. It builds post-quantum infrastructure for institutions that require long-term cryptographic security, not as an upgrade to schedule for later, but as a structural property of every system deployed today.

The company was founded on a single premise: the institutions that begin deploying post-quantum infrastructure now will complete that transition on their own terms. KXCO expects institutions that delay to face a rushed migration under regulatory pressure, with less time and less control.

KXCO does not provide custody, hold assets, or operate as a licensed financial institution. It builds the software layer that licensed institutions deploy to meet their own obligations. Licensed institutions hold assets. KXCO supplies the software.

The KXCO Armature blockchain, KXCO Portcullis (with Portcullis Hold for hosting and Portcullis Survey for scanning), KXCO Guildhall and KXCO Herald (Herald Verify) are built on the same post-quantum cryptographic foundation, KXCO's implementation of NIST FIPS 203, 204 and 205.

KXCO signs deployment attestations with ML-DSA (FIPS 204) and anchors records to Armature, which verifies ML-DSA-65 and ML-DSA-87 signatures on chain. Post-quantum signing is in place from the first operation, so customers do not need to migrate these signatures later. Anyone with the public key and a signed record can check the signature with open-source tools.

  • Architectural security. Post-quantum built in from the first operation.
  • NIST FIPS 203, 204 and 205. KXCO implements the post-quantum standards NIST has published.
  • Global operations, UK & US. Headquartered in the UK and US with global reach.

The cost of waiting is increasing

Quantum migration is no longer a technology decision. It is becoming a governance, compliance and risk-management decision, and the data being signed today may outlive today's cryptography.

  • Long-term contracts. Agreements signed today may outlive today's cryptography. Board resolutions, supply agreements, custody arrangements and financial contracts often remain enforceable for decades. KXCO provides ML-DSA-87 and ML-DSA-65 signing for records with multi-decade validity, from the moment they are created, not as a future upgrade.
  • Audit and compliance. Evidence must survive organisational change. Audit records should remain independently verifiable regardless of vendor changes, mergers or infrastructure migrations. KXCO anchors records to Armature. An anchor shows that a record existed in a given form no later than the time it was anchored.
  • Harvest now, decrypt later. Sensitive information is already being collected. State actors and sophisticated adversaries are capturing encrypted data today for future decryption, documented by the NSA, NCSC and equivalent agencies. Data that must stay confidential for years should be post-quantum from creation.
  • Verification without relying on KXCO. Recipients can check signatures with open-source tools. A valid signature shows which key signed a record and that the record has not changed since; it does not show that the content is true.

Built for the standards institutions must meet

NIST has published the post-quantum standards (FIPS 203, 204 and 205), the NSA has set transition dates for US national security systems in its Commercial National Security Algorithm Suite 2.0 (CNSA 2.0), and the G7 has issued a financial-sector roadmap. KXCO implements FIPS 203, 204 and 205. It does not assert compliance with CNSA 2.0.

  • Standards implemented. KXCO implements NIST FIPS 203, 204 and 205 in production today, so institutions that deploy KXCO use these algorithms from the first transaction. KXCO tests its implementation against NIST's published test vectors; these are KXCO's own runs, not a NIST validation.
    • NIST FIPS 203, ML-KEM (key encapsulation)
    • NIST FIPS 204, ML-DSA (digital signatures)
    • NIST FIPS 205, SLH-DSA (stateless hash-based signatures)
  • No rip-and-replace. Deploy as a software layer. Existing financial infrastructure remains intact. KXCO adds post-quantum signing, identity and audit to current operations: software-only, with no hardware dependency.
    • Integrates with existing infrastructure
    • Software-only deployment, no hardware dependency
    • Reports that document your post-quantum position for your compliance team to review

  • Migration ready. Assessment, deployment and compliance reporting. Built for regulated environments and built for audit. Migration advisory engagements are available now: begin the assessment and complete migration on your own schedule.

  • Financial sector roadmap, G7. Coordinated guidance across G7 nations.
  • Hardware dependency, 0. Software-only architecture. No rip-and-replace.

Engage KXCO for your institution

Whether you are assessing post-quantum migration risk, evaluating infrastructure for a regulated deployment, or building AI agents that sign their actions with post-quantum keys, the conversation begins with a direct engagement.

Contact KXCO

How the pieces connect

Stated once so it is never inferred. The group is not the filed company, and neither is a licence.

  • KXCO. The software company of the group. Builds Portcullis (including Portcullis Hold and Portcullis Survey), Guildhall, KXCO Sovereign, the KXCO Round Table Ontology and Herald Verify.
  • Armature. Permissioned record with on-chain ML-DSA-87 and ML-DSA-65 verification. chain.kxco.ai
  • Knightsbridge Financial Ltd. The filed UK entity, England & Wales, Company No. 15684975, incorporated 27 April 2024. LEI 213800TMP5DQFDKOZ549. ICO ZC182579. Member of the PKI Consortium. Runs its own book on Guildhall as a Member, not as the house.
  • Sister efforts. In the same group context: white-label rails (in beta), CareCredits and Target150. Sister efforts, not Portcullis features.

KXCO holds no financial licence and takes custody of no customer assets. Licensed institutions that deploy the software hold those relationships.

Working groups and memberships

Working groups first. Developer programmes are memberships, and are named as such.

Working groups and standards

  • PKI Consortium. Member, Knightsbridge Financial Ltd. Working groups PQC, CBOM, CM, PKIMM, TCWG. pkic.org/members
  • DIF, Linux Foundation. Contributor member M-018609, to 26 August 2027. identity.foundation
  • CoSAI (Coalition for Secure AI), an OASIS Open Project. Participant in the general list from 26 August 2026. coalitionforsecureai.org
  • NIST FIPS 203, 204 and 205. Implemented in KXCO's production systems. This is KXCO's implementation of the standards, not a NIST validation. NIST FIPS 204
  • NIST ACVTS demonstration environment. 2,130 test cases across ML-KEM, ML-DSA and SLH-DSA, zero failures. Demonstration certificate A11025, 13 September 2026. Evidence document

Developer programmes: member, not partner

  • IBM Quantum Network. Member.
  • NVIDIA Developer Program. Member.
  • Visa Developer Program. Member.
  • Circle (USDC) Developer Program. Member.
  • xAI Developer Program. Member.
  • Palantir Developer Program. Member.

What a verifier can look up in five minutes

Registrations, standards and timelines

Registrations and memberships you can check at the source, the standards KXCO implements, and the regulatory timelines it tracks.

  • ICO, UK GDPR: data controller registered. Ref ZC182579, Data Protection Act 2018, Knightsbridge Financial Ltd. Verify at ICO
  • GLEIF, ISO 17442: Legal Entity Identifier. LEI 213800TMP5DQFDKOZ549, Knightsbridge Financial Ltd, active. Verify at GLEIF
  • NIST FIPS 203, 204 and 205: post-quantum cryptography. ML-KEM-768, ML-DSA-65 and SLH-DSA in production from genesis. ML-DSA-87 since 6 October 2026. ML-KEM-1024 for new keys in KXCO's packages since 10 October 2026. These are KXCO's implementations, tested by KXCO against NIST's published test vectors; this is not a NIST validation. NIST FIPS 204
  • NIST ACVTS: demonstration environment. 2,130 test cases across ML-KEM, ML-DSA and SLH-DSA, generated and checked by NIST's server, zero failures. Demonstration certificate A11025, validation record 42204, 13 September 2026. Evidence document
  • Intellectual Property Office of Ireland: patent pending. Identity-Verified Records Anchored to a Blockchain Ledger, application S2025/0544. Inventors: Grant Leech, John Heffernan and Shayne Heffernan.
  • PKI Consortium: member. PQC Working Group, PQC Capabilities Matrix, pkic.org. Verify at PKIC
  • DIF, Linux Foundation: contributor member. Decentralized Identity Foundation, Joint Development Foundation Projects LLC, membership M-018609, Knightsbridge Financial Ltd, to 26 August 2027. Decentralized Identity Foundation
  • CoSAI, OASIS Open: general list participant. Coalition for Secure AI, OASIS Open Project, general list participation from 26 August 2026. Coalition for Secure AI
  • NSA CNSA 2.0: timeline for US national security systems. CNSA 2.0 sets the post-quantum transition timeline for US national security systems and specifies ML-DSA-87 (Category 5) for signatures. KXCO implements ML-DSA-87; its ML-DSA-65 (Category 3) signatures fall outside CNSA 2.0. KXCO is not a CNSA 2.0 validated product and does not assert compliance. NSA CNSA 2.0
  • CycloneDX 1.6 CBOM: PQC inventory standard. KXCO's scanner produces a cryptography bill of materials (CBOM) in CycloneDX 1.6 format (OWASP, ECMA-424), signed with ML-DSA (FIPS 204). A CBOM can support an EU Cyber Resilience Act inventory; it does not by itself establish compliance. CycloneDX
  • Companies House, UK: UK incorporated. Knightsbridge Financial Ltd, Company No. 15684975, England & Wales. Companies House
  • US Executive Order 14412: contractor vulnerability disclosure. Section 6(d) requires covered US contractors to run vulnerability disclosure policies that accept cryptographic vulnerability reports. The implementing Federal Acquisition Regulation (FAR) proposed rule is due within 270 days of 22 June 2026. KXCO already publishes a vulnerability disclosure policy that accepts such reports. Federal Register