Key Highlights

● SEALSQ's VaultIC408 secure element achieved NIST FIPS 140-3 Level 3 validation, Certificate No. 5463, on August 5, 2026, valid through August 4, 2031.

● The QS7001 post-quantum secure element now targets a Common Criteria hardware evaluation test report for its V1 version in October 2026, with the V2 version pushed to January 2027 and full EAL5+ certification targeted for 2027.

● The QVault Trusted Platform Module family faces delays too, with the TPM-183 model now targeting TCG certification in February 2027 and the TPM-185 model in May 2027.

● All versions of the QS7001 and QVault products discussed are currently available only as engineering samples rather than shipping in volume, and neither 6-K discloses SEALSQ's current Revenue or Backlog for either product family.

SEALSQ Corp (NASDAQ:LAES) used two separate Form 6-K filings on September 25, 2026 to deliver a mixed message: its VaultIC408 secure element has cleared a top-tier U.S. government security certification, opening doors to defense and critical-infrastructure customers, even as the company pushed back certification timelines for two other product families still in development.

The dual disclosure gives investors both a completed regulatory win and a reminder that SEALSQ's broader post-quantum security roadmap remains a multi-year, milestone-dependent undertaking.

VaultIC408 Clears NIST Certification

SEALSQ announced that its VaultIC408 secure element achieved NIST FIPS 140-3 Level 3 validation, Certificate No. 5463, on August 5, 2026, with the certificate valid through August 4, 2031. That validation confirms the tamper-resistant chip's cryptographic protections, including AES, RSA, ECDSA and SHA-2 algorithms, meet the federal standard required for government, defense and critical-infrastructure applications.

CEO Carlos Moreira said the certification "gives our customers an independently validated hardware-security foundation for systems where the protection of device identities, cryptographic keys and sensitive operations cannot depend on software alone." FIPS 140-3 is a widely referenced U.S. government cryptographic module standard, and Level 3 certification specifically indicates the module includes physical tamper-detection and response mechanisms beyond the baseline requirements.

Two Roadmaps Pushed Back

The second 6-K details slower progress on SEALSQ's post-quantum product lines. The QS7001 post-quantum secure element, while having already passed fault-injection and side-channel testing in March 2026 and achieved NIST SP 800-90B entropy source validation in May 2026, now targets a Common Criteria hardware evaluation test report for its V1 version in October 2026, with a full post-quantum hardware evaluation report for the V2 version pushed to January 2027. Full EAL5+ Common Criteria certification is now targeted for sometime in 2027.

Separately, the company's QVault Trusted Platform Module family faces its own delays: the TPM-183 model now targets TCG certification in February 2027, and the TPM-185 model in May 2027. The filing does not state how these dates compare to previously announced targets, though the framing of the disclosure as an update implies at least some slippage from earlier guidance.

Reading the Two Filings Together

Taken as a pair, the filings show SEALSQ landing a completed certification for a product already in the field, VaultIC408, while simultaneously acknowledging its next-generation, post-quantum-focused chips remain engineering-sample products still working through the multi-stage certification processes required before they can be sold into regulated government and defense markets. The company notes all versions of the QS7001 and QVault products discussed are currently "available as engineering samples" rather than shipping in volume. That distinction matters for investors trying to gauge near-term revenue potential versus the longer-dated opportunity represented by the still-uncertified post-quantum lines.

Business Background

SEALSQ Corp is a foreign private issuer incorporated in the British Virgin Islands with principal offices in Cointrin, Switzerland. The company develops post-quantum cryptography semiconductors, public key infrastructure solutions and provisioning services aimed at government, defense, healthcare, automotive and industrial customers, positioning itself as a bridge between current Cybersecurity needs and future quantum-resistant infrastructure as encryption standards evolve to withstand Quantum Computing threats. Neither 6-K discloses SEALSQ's current revenue or backlog tied to either product family.

Milestones on the Certification Calendar

For VaultIC408, the certificate's validity runs through August 4, 2031, giving SEALSQ a five-year window to court government and defense customers on the strength of the completed certification. On the post-quantum side, the near-term dates to track are October 2026 for the QS7001's V1 hardware evaluation report and February 2027 for the QVault TPM-183's TCG certification, both of which will show whether the newly extended timelines hold or slip further, a pattern that has already pushed some of these certifications back once. The full EAL5+ Common Criteria certification targeted for 2027 remains the furthest-out and least specific milestone disclosed.