Exhibit 99.4

“Sufficiently powerful quantum computers could expose all our personal information,

financial transactions, and business and government secrets.”
— National Institute of Standards and Technology

Quantum “D-Day” Is Coming.¹

And It Could Not Only Break the Trust the Internet Is Built On...
But Re-Write Every Transaction That’s Already Been Recorded.

The threat is no longer theoretical. Experts believe it’s inevitable.

Q-Day doesn’t just break tomorrow’s encryption...

It makes everything already recorded untrustworthy — because every log, transaction and audit trail signed with today’s cryptography can be forged after the fact.

And for curious investors looking to explore the next wave of Deep Tech, read on to learn how Naoris Quantum Protocol…

Introducing: Naoris Quantum Protocol

When sufficiently powerful quantum computers arrive, the encryption protecting banks, governments, critical infrastructure and the broader digital economy could face a threat unlike anything the internet has encountered before.⁷

“Naoris’ mission is to make trust between every device, system, server, service and AI agent continuously provable. That means 24/7 validation that is cryptographically signed and post-quantum by default. This way our digital economy runs on PROOF instead of blind trust.”

— David Carvalho, Founder and CEO

That’s why Naoris believes the answer is not simply another firewall or another layer of traditional cybersecurity…

It’s to ensure trust between every device, system, server and service is continuously provable — so that no single machine — and not even Naoris itself — gets to be the ultimate source of truth.

Naoris does this through a post-quantum distributed “Trust Mesh”, so no machine has to be trusted on its own word.

This means the architecture distributes validation across the network.

That’s important because…

The Internet was Never Built to Know Who You Could Trust

We’ve built the entire internet on one quiet assumption — that the servers and devices on the other end are telling the truth.

When you order something from Amazon…

Or post a family picture on Facebook…

You assume these companies are watching out for you… protecting your private logins, data, etc.

It’s a ‘handshake in the dark.’

You have no way of verifying if those devices or servers are compromised or not.

You’re vulnerable every time you log in or swipe your card at the store.

But it’s not a surprise. Because it’s how the internet was built… for now.

Each decade or two, there’s an innovation to the internet’s infrastructure… a new layer solving a problem the last generation never saw coming.

Go back to the earliest days of computer networking, and the first challenge is child’s play today…

Task #1 — get 2 computers to talk to each other.

In the 1960s and 70s, even getting two networks to exchange information was difficult and expensive.

That’s when a common set of rules called” TCP/IP” solved it.

Suddenly computers no longer only communicated with you. They could now connect – and communicate – with others.

TCP/IP (developed 1970s) established common rules letting interconnected networks exchange data. Source: standard computing history.

At the time, websites were identified by a string of numbers.

If you wanted to find specific information, you identified a website by numbers alone.

Imagine needing a phonebook to use the internet where you’d have to type in 10 digits to reach your favorite site.

Nobody wants to memorize a string of numbers to reach their bank.

So as more computers came online, a more convenient system for accessing them was needed.

That’s when the Domain Name System, DNS, gave the internet an address book: type a name, it finds the number attached to that name.

(Keep this in mind: Naoris’ Executive Chairman, David Holtzman, later ran the master root server of that very system as CTO of Network Solutions. More on him below.)

But then another problem came up…

Now that machines could find each other…

People began sending things worth stealing: passwords, debit/credit card numbers, medical records, bank details.

Putting that sensitive information into a website would be like reading out your credit card number every time you check out at the store.

So how do you stop someone stealing it in transit?

Enter Encryption. First, there was SSL (now it’s TLS). This encryption keeps your data safe when you put your card details in on Amazon.

There’s a little padlock in your browser right now… go take a look. That’s TLS encryption. That one breakthrough made online commerce, buying stocks on your computer, etc. possible.

This TLS lock protects your data on a site.

Then, as the networks filled with people…

You needed “gates” to ensure only certain people in a business or group could access information.

Who won the SSL/TLS race?

SSL/TLS (mid-1990s) encrypts data in transit — the browser ‘padlock.’ Source: standard computing history; Ojha et al., Sensors & Transducers 268(1), Apr 2025, §1.3.

That led to authentication — codes to your phone, long-character passwords, identity systems.

And now…

We have “Zero Trust”.

Formalized in 2020… “Zero Trust” simply states: do not trust someone just because they are already on your network… make them prove themselves.

Every one of those advances was revolutionary at the time.

And together, they built the internet we use and enjoy today.

Who won the Zero Trust race?

Companies dominating the cybersecurity space right now

All these companies ended up in the 11-figure club.

But underneath all of them…

One question was never answered and it’s grown more dangerous every year (especially now that we use devices everywhere we go, and now that AI is starting to act on our behalf):

What if the machine itself is wrong or compromised?

The Internet was Built in Layers… Naoris Believes it’s Building the NEXT Layer

Every question has its own layer. The last one never did. Naoris calls its answer the post-quantum trust layer.

Think about the distinction.

A machine can have:

And the machine itself can still be hacked or compromised.

That is the gap the internet never closed.

We built systems for connection, location, privacy, and identity. But continuously proving the integrity of every device has proven to be a tall order.

So for decades, we’ve lived with it.

Said another way:

“You have an IT worker at your job tinkering with the network, fixing the ‘bugs’ as they come up manually. But…

Who’s monitoring the I.T. guy each day?”

It’s a band-aid because…

That world is disappearing.

The Countdown to Quantum Computing

Where all current encryption potentially becomes obsolete

…Google engineers just moved the timeline up…

Two things happened in the last 18 months that changed the math:

[VISUAL — simple “the goalposts moved” graphic: 20,000,000 qubits (2019 estimate) → under 1,000,000 (2025 estimate). Source: https://arxiv.org/abs/2505.15917]

There’s a reason governments are suddenly thinking hard about cryptography.

It’s called quantum computing.

For simplicity’s sake, you only need to know one thing…

Today’s computers process information one way.

Quantum computers use fundamentally different physics that could eventually let powerful-enough machines solve certain math problems that would take today’s computers an impractical amount of time.

And some of those math problems sit directly underneath the encryption the modern world runs on.

Yes, your bank, government communications, your company’s corporate systems, digital signatures, secure websites, sensitive data.

A sufficiently capable quantum computer could threaten the widely used public-key cryptography (RSA and elliptic-curve).

In layman’s terms… these public keys help secure everything from digital signatures and communications to banking and government systems.

This quantum computer doesn’t exist at the required scale today, and nobody knows exactly when it will.

For decades, the world was smaller.

Computers weren’t everywhere. Your fridge wasn’t online. Your car wasn’t talking to the cloud. No AI was operating software on your behalf.

And the mathematical locks guarding the most sensitive information on Earth were still far too hard for any ordinary computer to pick.

There’s a name for the day quantum computing arrives and can pick the locks.

The experts call it Q-Day — the point when a quantum computer becomes powerful enough to break the public-key cryptography much of the digital world relies on — the digital certificates and signatures that prove things are what they claim to be.

And here’s the part that matters for everything you just read.

You might assume Q-Day means the internet goes dark. But it’s worse. Much worse….

According to cybersecurity giant Palo Alto Networks, most systems would keep running. The bigger problem would be trust.

Digital signatures. Certificates. Identities. Software authenticity. Secure connections. The mechanisms computers use to prove that something (or someone) is who they claim to be.

If they were secured with cryptography that later becomes breakable, the proof behind them may no longer be enough to guarantee authenticity — because they could be forged after the fact.

Palo Alto puts it in three words: “the largest issue would be verification.”¹⁰

A machine with the right address, the valid certificate, the correct password… that still can’t prove it hasn’t been tampered with.

Quantum doesn’t create that trust gap. It threatens to blow it wide open.

Q-Day isn’t a blackout. It’s a crisis of digital trust.

And here’s what makes a “someday” threat frightening today: some of the secrets a quantum computer could expose years from now may already be sitting on somebody else’s server.

Security agencies have warned for years about a strategy with a chillingly simple name — harvest now, decrypt later.

You don’t crack the encryption today. You steal it anyway…

Copy it. Store it.

…Wait.

A military file, a trade secret, a set of financial records… all still valuable years from now. The attacker doesn’t need today’s key. He needs tomorrow’s computer.

The theft doesn’t wait for Q-Day. Only the unlocking does.

GOOGLE IS ALREADY SOUNDING ALARMS

2026 — Google sets an aggressive goal to complete its own post-quantum migration by 2029¹¹

Naoris began building in 2018 — before the standards were finalized, before Google put 2029 on its migration clock, before most investors knew what Q-Day meant.

Any nefarious hacker or country… only needs 1 device to potentially compromise all of the devices on a network.

It’s getting harder for tech and the government to keep up.

New devices – and threats – are coming online every single day

Every new device is an open window for hackers

Look around your own house…

Twenty-five years ago you might have had one computer online… a dial-up connection that took (sometimes) minutes to load one webpage.

Today your TV is connected, you control your thermostat from your phone, your doorbell alerts you with a video of who’s knocking…

Your car connects… your watch connects… heck, you can hook up your refrigerator to the internet now.

Multiply that number of devices across the whole economy.

And now, in the mid-2020s… companies are embedding autonomous AI agents into all of it — agents that buy, sell, approve and control things, increasingly without a human in the loop.

A Million Machines Became 50 billion

In 1992, roughly 1,000,000 computers were connected to the internet.¹²

In 2013, Cisco estimated that by 2020, roughly 50,000,000,000 would be connected to the internet.¹³

And Palo Alto Networks estimated about 98% of IoT traffic moving between them is unencrypted… meaning… it’s readable by anyone who looks.¹⁴

Every one of those devices is another “handshake in the dark.”

Cross your fingers and hope your doorbell is behaving in the correct way and not stealing information from you.

It’s no surprise cybersecurity grew into one of the largest industries on Earth:

You have firewalls at your office, antivirus software on your computer, aggressive spam filters on your email to detect phishing…

And yet the complexity itself became part of the problem.

A large company might run security products from dozens of vendors: CrowdStrike, Cloudflare, Palo Alto Networks…

Each runs its own software, has its own updates and quirks…

All of it built to hopefully stop outside intruders from getting in.

But what if the intruders are already inside?

The world’s third-largest “economy”

Cybersecurity Ventures projects cybercrime will cost the world about $10.5 trillion a year.¹⁵

For perspective, that would make cybercrime the world’s third largest economy — larger than the entire economic output of Japan or Germany.

And the industry was (hastily) built, in barely a decade, to act as guardians to keep intruders out.

Chaos happens when ONE central authority is in charge of protecting every device

In July 2024, the cybersecurity company CrowdStrike ($CRWD) pushed a faulty update to its Falcon software sitting on millions of Windows machines.¹⁶

No red flags until it was too late…

Microsoft estimated about 8.5 million devices were hit.¹⁷

Airlines grounded flights worldwide. Banks, hospitals, small businesses all saw major disruptions.

The software causing the damage was the software meant to protect the machines… it wasn’t a hacker slipping past a firewall.

Customers give a ‘handshake in the dark’ to dozens of companies each day that they are safe and protected.

These cyberattacks happen… and all systems seem normal until the data is stolen.

How $440 million disappeared in 45 minutes because no one knew their own devices went rogue¹⁸

Knight Capital didn’t have an AI problem…

There were no hackers or stolen passwords. Nobody broke through a secure firewall.

In 2012, Knight was one of the biggest trading firms in America. Daily, their computers bought and sold enormous volumes of stock.

On August 1… a normal day… Knight updated the software on 8 servers.

Well, 7 updated correctly…

One did not.

A technician had missed it.

Normally, this isn’t an issue in any business.

But hidden on that 8th server was some old code. And when the stock market opened at 9:30am, that one server began firing incorrect orders into the market.

Firing off orders is what their computers did. So this “was normal.”

However…

In about 45 minutes, Knight had run up roughly $440 million in losses.

Per the New York Times

Nearly half a billion gone and one of the biggest firms nearly collapsed in 1 hour.

All because one machine out of eight was behaving differently from the others.

Nothing was wrong with its permissions. It was authorized to make those trades.

By the time actual humans caught on, the $440 million was long gone.

No firewall would’ve stopped this. The threat was on the inside.

What if a Company You Trust Sends You a Virus Today?¹⁹

In 2020, SolarWinds made network-management software used by thousands of organizations including major corporations and government agencies.

Their whole job was to help companies watch their own infrastructure.

SolarWinds was the central watchman for a company.

…what happens when the central point fails…

Hackers managed to slip malicious code into SolarWinds’ own legitimate software updates.

Those updates went out through the normal, trusted channel.

Customers — their own clients who gave them money to protect them — had no reason to doubt the update… so many downloaded it.

In a clever “Trojan Horse” maneuver, hackers managed to get their code into as many as 18,000 organizations.

The cybersecurity breach of SolarWinds’ software is one of the most widespread and sophisticated hacking campaigns ever conducted against the federal government… — The U.S. Government Accountability Office, 2021

No passwords were stolen to get the update onto computers…

Customers simply downloaded the software… and their computers did not resist downloading it either.

Who watches the watchmen?

Your antivirus software watches your computer…

Your monitoring tools watch your network…

Your identity system decides who gets in…

And soon, your AI agents will be watching all of it for you.

But what watches them?

The government? Who watches the government? Eventually something has to be trusted without anyone able to prove it.

That is the gap Naoris is filling.

The “P-Word”: The Next Layer of the Internet

And the one thing quantum computing can break in seconds (unless a company can stop it)

Proof.

For fifty years, there was no way to get it.

There was no way to keep checking, continuously, whether a machine was still telling the truth to every other device on the network.

So the whole world shook hands in the dark, and hoped.

The one thing all three failures had in common

In every one, permission was valid and trust was assumed.

Not one was a failure of who was allowed in… every one was a failure of whether the device (even the company) already trusted could still be trusted.

The answer isn’t “more security”… it’s PROOF.

That all changed…

…quietly…

In 2018.

One man, who spent two decades watching these problems grow from the inside… including running security for an airport, national infrastructure and government systems… set out to solve it once and for all.

The Man Who Wanted to Take Trust Out of Cybersecurity’s Hands

Back in 2018, when cybersecurity meant stronger passwords, better firewalls, and keeping hackers at bay…

Naoris CEO David Carvalho was thinking about a much different problem. One that grew out of his 20-year cyber security career which included…

And at each role, he kept hitting the same wall:

You can always build another security wall…

Require another (stronger) password…

Add more CAPTCHA…

But sooner or later, something inside the system has to be trusted.

Meaning — the buck stops with a central authority.

A device sends out a status report that says: “I’m okay” and the system (and the reader) decides whether to believe it.

Then came the conversation that changed everything...

In 2018, Carvalho sat down with the late Lt. Gen. Kjell Grandhagen — Chief of the Norwegian Intelligence Service from 2010 to 2016 and Chairman of NATO’s Military Intelligence Committee. A man who had spent his career on the receiving end of nation-state attacks (and who joined Naoris’ advisory board that same year).²⁰

Grandhagen’s conclusion was blunt: the centralized model of trust — one authority vouching for everything from a single point — is fundamentally flawed. It gives the adversary exactly one target.

So Carvalho asked the question almost nobody in the industry was asking: what if nothing got to vouch for itself?

Meaning — prove yourself 24/7 that you are who you say you are.

Blind trust… the “handshakes in the dark”… are gone.

Flip the lights on and see everyone.

Right when a device, server… any machine starts acting “differently” than it normally does… it’s flagged.

And it does it immediately. Compare that to waiting until an hour later and $440 million is gone.

That was the idea David began building in 2018, which later became Naoris Quantum Protocol.

And he did not build it alone. The dCSMA architecture emerged from discussions with the late Lt. Gen. Kjell Grandhagen, former Chief of the Norwegian Intelligence Service and Chairman of the NATO Military Intelligence Committee, who identified the centralized cybersecurity model as fundamentally flawed.The Brains Building the Future of Internet Trust

David Carvalho — Founder and CEO. Over 20 years as an ethical hacker and Global Chief Information Security Officer across regulated and critical sectors: CISO of London City Airport, Group CISO of the 100,000-person OCS Group, and government systems under the NATO umbrella. Certified CISSP.²¹

David Holtzman — Executive Chairman. As CTO of Network Solutions in the late 1990s he ran the Domain Name System and managed “the Dot” — the internet’s master root server. Former NSA / Naval Security Group codebreaker and former Chief Scientist, Internet Information Group at IBM..²²

Sumit Chauhan — Chief Technology Officer. His expertise spans product engineering, technical consulting, solution architecture, and co-founding an IT company, with deep domain knowledge in blockchain, AI, machine learning, big data, and cloud technologies. 25+ years across distributed systems, AI, cloud and enterprise software.

Magnus Fyhr — Chief Financial Officer. 25+ years of capital markets experience. Former CFO of AlphaOcean and past CEO of Clarksons Capital Markets.

Youssef El Maddarsi — Co-Founder & Chief Business Officer. Named the most influential entrepreneur in Morocco in 2025. 10+ years of strategic development and partnership building.

This experience is what makes Naoris especially equipped for securing the coming quantum threat.

On one hand, a founder who built his career defending systems… and another who worked on the actual infrastructure the internet itself was built on.

Both think distributing trust and validation is key.

Ironically…

The entire internet is already distributed.

When one website goes down… the entire internet doesn’t collapse. It’s isolated.

Yet much of the internet’s security still depends on centralized sources and centralized points of trust.

David believes — “If the entire network is distributed… trust should be distributed as well.”

Rather than rely on one central authority to keep track of every new device, system, server and service coming online daily…

Naoris makes every one of them another soldier defending the group.

Naoris is not a cryptocurrency company. And whether you buy Bitcoin or not, the technology behind Bitcoin did get something right and it’s what Naoris believes at its core:

Thousands of computers that don’t know or trust each other can still agree on what is true — with no central computer making the call.²³

With Bitcoin, there’s a ledger that keeps tabs on Bitcoin ownership.

No one can fake ownership or rewrite the ledger for Bitcoin or similar cryptocurrency without breaking the chain of ownership; Bitcoin was designed to resist centralized control.

Before this type of distributed innovation, if you wanted to know whether Joe had $100 dollars in his account, you asked the bank. The bank kept the ledger and their word was final.

Bitcoin proved another model worked: many independent computers agreeing on the state of the ledger and there’s no central figure keeping tabs.

Everyone is keeping tabs on what is true and not.

That is a distributed consensus… and it’s the core of Naoris.

David and Naoris’ founders took ‘distributed consensus’ and applied it to the one thing nobody had applied it to: the integrity of the machines themselves — every device, system, server and service.

Much like when CrowdStrike took out 8.5 million devices… a centralized network gives you 1 point of failure. Distributed = far less chance for it all to fail.

So, instead of one authority deciding whether a machine is healthy… the machines prove it to each other.

They built their own consensus mechanism and called it Distributed Proof of Security. dPoSec.

What is dPoSec?

dPoSec is designed to let devices, systems, servers and services validate one another against known-good baselines. Nothing self-certifies.

Every validation is signed with NIST-standardized post-quantum cryptography, in real time — at the strongest setting the standard defines (ML-DSA-87, “Dilithium-5”), the same level the NSA requires for National Security Systems.²⁴ Naoris calls the result the post-quantum Trust Mesh.

It is not an antivirus, a firewall, or a monitoring dashboard, and it does not replace them. It runs alongside whatever a customer already has. Naoris sits beneath the stack — below security tools, below cloud, above hardware — and gives the whole stack the one thing it could never produce on its own: proof.

No longer is there a central point of failure or trust…

Trust gets distributed across the entire network.

No one device is allowed to declare itself trustworthy just because it says so. And the verdict the devices reach together is post-quantum-signed… designed so that no single device can fake it.

Flipping all of cybersecurity on its head

Traditional security sees another machine and says: “one more thing to protect.”

Naoris wants the network to say: “good, here’s another witness.”

Naoris’ research calls it a “contrarian design pattern”: turn the number and diversity of devices into part of the defense itself.

And the network is designed to get more resilient as more machines join.

While centralized points of trust get more risky.

Naoris is designed so other devices keep watch on your device’s health, using anonymized node identity to preserve privacy.

The goal: a hacker can’t quietly compromise one machine and disappear. He has to contend with other nodes checking on any machine he touches, plus NIST-standardized post-quantum cryptographyThe amount of time, cost and effort that takes is intended to push attackers somewhere else.

And even Naoris doesn’t get to be trusted

Here’s the real kicker…

If the entire point is to remove dangerous central trust, it would be absurd to build a system where everything ends up depending on… Naoris.

Then you’d just have a new watchman.

So the architecture is built so the customer runs its own nodes and keeps control of its own environment.

Naoris doesn’t sit in the middle approving every decision, and the Trust Mesh can run in private, on-premise, sovereign-cloud, hybrid, even fully air-gapped settings — with the same capabilities in every one.

Which means a bank, a defense contractor, a government, or an operator of critical infrastructure doesn’t have to ship its most sensitive data somewhere else and hope another company guards it.

The trust network runs inside infrastructure the customer already controls.

No more single watchman.

Instead Carvalho and Naoris built: a network of witnesses where evidence, not any one company’s word, decides who can be trusted.

That’s the architecture.

The Next Customer is a Machine: AI Trust

The internet was built for humans logging in.

The next decade belongs to AI agents acting on our behalf — trading, procuring, approving invoices, controlling equipment, talking to other AI agents...

But an AI agent has exactly the same problem as Knight Capital’s eighth server: the right credentials, the right permissions… and no way to prove it hasn’t drifted, been poisoned, or been hijacked.

Naoris’ post-quantum Trust Mesh is designed to validate device, identity and data for AI agents — at machine speed, in-line, before the action lands.

Not a log to read the next morning. A verdict in milliseconds.

Naoris describes this as post-quantum-attested AI identity, and uses the assigned “Naoris Decentralized Swarm AI” mark for the distributed intelligence behind it.

The rest of the world is arriving at the same conclusion:

Naoris’ first announced AI partnership — with Electra AI, applying post-quantum device integrity to AI-driven battery intelligence across grids, data centers, robotics and e-mobility fleets — is exactly this use case: trusting the machines that AI is now running.²⁷

Sovereign Infrastructure — and Sovereign AI

Governments no longer want to rent their trust from somebody else’s cloud.

Naoris is designed for deployment.

The nodes belong to the state or the enterprise. The keys stay home. The audit trail is cryptographic — and it belongs to the owner, not the vendor.

That’s what Naoris calls digital sovereignty at scale.

And it’s why the company’s target market reads like a list of who can’t afford to be wrong: governments, central banks, payment and settlement systems, systemically important financial institutions, defense, energy, transport and telecoms.

It’s also why the largest engagement type Naoris plans to sell is a national and sovereign program — a country, or nation state, running its own post-quantum trust layer on its own terms.

And these buyers are not waiting for a sales call. The people who run the world’s payment systems are already testing post-quantum:

The central banks have started. Main Street’s banks will have to follow.

[VISUAL — logo strip or map: BIS · Banca d’Italia · Banque de France · Bundesbank · Swift · Europol · G7 / U.S. Treasury / Bank of England. Sources: https://www.bis.org/publ/othp107.pdf · https://www.europol.europa.eu/publications-events/publications/quantum-safe-financial-forum-call-to-action · https://home.treasury.gov/system/files/136/G7-CEG-Quantum-Roadmap.pdf]

Compliance You Don’t Have to Prove — Because it Proves Itself

Every regulator is asking the same question in different words: can you prove your systems are what you say they are — continuously, not once a year?

DORA. NIS2. PCI DSS 4.0. CMMC 2.0. The Cyber Resilience Act. NSM-10, Executive Order 14144 and CNSA 2.0 in the United States.

Each demands evidence of integrity and operational resilience. And NSM-10, Executive Order 14144 and CNSA 2.0 carry a post-quantum deadline landing between 2025 and 2035. The remaining frameworks create mounting pressure toward post-quantum readiness through crypto-agility and resilience-testing requirements.

Naoris is designed to turn that evidence into a network by-product. Continuous validation replaces point-in-time audits. Every validation is post-quantum-signed and time-stamped, producing a tamper-evident audit trail.

That is why Naoris positions itself not only in cybersecurity but in compliance automation, operational resilience and data integrity — three budgets that already exist inside every bank and every ministry, and that are all now being told to go post-quantum.

The analysts see the same thing. Gartner named digital provenance — proving the origin and integrity of software, data and AI-generated content — a Top 10 Strategic Technology Trend for 2026, and predicts that by 2029 organizations that failed to invest in it will face “sanction risks potentially running into the billions of dollars.”³¹ That is exactly what a post-quantum-signed audit trail is for.

How Big is the Prize? Much Bigger than “Cybersecurity”

Here’s where most people get Naoris wrong…

If you only count the “post-quantum cryptography” market, you see a small number: about $0.42 billion in 2025, growing fast to $2.84 billion by 2030.³²

But that doesn’t give the whole picture — not even close…

Gartner projects worldwide end-user spending on information security would be $193 billion in 2024, $213 billion in 2025 and $240 billion in 2026.³³

The new quantum rules force that quarter-trillion-dollar budget to be rebuilt on new foundations.

SAnd Naoris doesn’t just sell into security. Eight things that used to be bought separately are becoming one thing:

Eight markets becoming one layer

Management believes these markets “are converging into a unified trust infrastructure layer.”

Naoris is built to be that layer.

It does not compete category by category. It sits underneath all eight.³⁴

And to put numbers on a few of those:

8 Years Ahead of What’s Happening Now

Naoris’ management has quietly spent the past 8 years getting ahead of what’s coming. Not just AI… but the future of computing.

And it has spent time and money building an intellectual-property ‘moat’ around its innovation:

Patents are in process.

Naoris has provisional patent applications in process covering core elements of its Distributed Proof of Security architecture and Trust Mesh. The Naoris Protocol, the Trust Mesh and related software, algorithms, designs and trade secrets are owned by the company.³⁹

Its tech survived academic scrutiny.

Work connected to the technology has appeared in three papers plus a review. And an independent systematic review in Neurocomputing (Elsevier, 2024) — by researchers at the University of Jaén and the University of Essex who screened 337 papers in the field — describes the Naoris Protocol as “a first effort” in decentralized cybersecurity mesh.⁴⁰ Their words, not Naoris’.

Its tech is built to outlast the standards.

Cryptographic standards will change again. Naoris’ Time-Proof Security Architecture is designed so the network can upgrade to stronger methods over time without disruptive overhauls or forks. The goal is thatwhat a customer buys today doesn’t become obsolete when the next standard lands.

It has put the tech through the gauntlet.

Out of the lab… into the fire.

Naoris opened a public testnet on 31 January 2025, operating through 12 November 2025.⁴¹

No, these were users, not customers or businesses. It showed the architecture could operate across a very large number of devices around the world.

To compare — the largest distributed network most people have heard of, Bitcoin, runs on roughly 13,000–30,000 nodes at a time.

Naoris is Going After the Big Fish.

Securing a home computer is one thing. Securing a nation is another.

Its target customers are banks, central banks, defense, government, energy, telecommunications, transportation… the places where a digital failure lands far beyond one machine.

Naoris’ technology intends to allow those organizations to keep control of their own systems, keys and data rather than handing them to another centralized vendor.

It has built a product line on top.

The same trust infrastructure supports products for deployment discussions:

Each is built on the same post-quantum Trust Mesh.

And in each of those three product categories, Naoris says it is not aware of any direct competing commercial product — the neighbors are custody and proof-of-reserves providers, SASE/ZTNA vendors, and avatar/content platforms, that do not currently provide an integrated post-quantum cryptographic identity attestation layer as a primary product capability.⁴²

The first announced relationships are public.

Naoris has a 49% minority JV interest with XCURE and an Electra AI partnership.

The Shift is Already Happening…

Governments aren’t waiting to find out when quantum computers will be a threat.

They’re already demanding companies change their locks now.

For years, cryptographers have been building new algorithms designed to resist both conventional and quantum attacks. This is called post-quantum cryptography.

In 2024, the National Institute of Standards and Technology (NIST) finalized its first principal post-quantum standards for widespread use.

Governments are not waiting…

They expect companies, banks, governments and corporations to prepare for post-quantum cryptography now.

Mandates to come fast and furious…

WASHINGTON DIDN’T WAIT FOR Q-DAY

2022 — the White House begins directing federal systems toward post-quantum migration (NSM-10; OMB M-23-02)

2023 — NSA, CISA and NIST jointly warn that attackers could be stealing encrypted data today to unlock later

2024 — NIST finalizes its first major post-quantum cryptography standards

2035 — full federal migration baseline under NSM-10, Executive Order 14144 and CNSA 2.0.

The digital-signature standard is ML-DSA / FIPS 204 — the standard Naoris signs every validation with.

The threat of quantum computers in the hands of hackers or even the wrong country has mass implications.

None of this is to scare…

But to share how powerful quantum computing can be, especially at the disposal of bad actors.

The government is scrambling to make changes asap.

In a rare moment of agreement…

NATO allies have committed to a strategy that “will foster the development of a secure, resilient and competitive quantum ecosystem that is able to respond to the fast pace of technological competition in the quantum industry.”

Article from June 2025

The compliance calendar — four governments, one direction

2024 — first post-quantum encryption standards finalized (NIST).

1 January 2027 — new U.S. National Security Systems must be quantum-safe (NSA CNSA 2.0).⁴³

2028 — U.K.: cryptographic discovery and migration plan complete (NCSC).⁴⁴

2035 — full migration baseline for U.S. federal systems.

[VISUAL — horizontal timeline 2024→2035 showing 1 January 2027 and 2035.]

Organizations are being told to begin preparing now. Because the thieves aren’t waiting either.

And here’s the gap Naoris is selling into: a May 2025 survey of 1,042 senior security executives found that 69% know quantum computing is a risk to their encryption… and only 5% have implemented quantum-safe encryption.⁴⁵

Nineteen out of twenty large companies haven’t started. The rules now say they have to.

[VISUAL — two-bar or donut graphic: 69% aware vs. 5% deployed. Source: https://www.globenewswire.com/news-release/2025/05/08/3077339/0/en/Quantum-Readiness-Gap-DigiCert-Study-Finds-Just-5-of-Enterprises-Have-Quantum-Safe-Encryption-in-Place.html]

Naoris is already prepped for one of the biggest shifts in computing potentially coming in the next few years

When 1 quantum computer can break the encryption of many secure sites in mere seconds

Picture a thief who steals a locked safe from your house. He can’t open it today… but he doesn’t throw it away.

He stores it in his garage until he finds what he needs to break into it.

That’s the concern with encrypted data.

A hacker can capture it today, keep it, and wait for future computing that may eventually crack it open.

Think about data stolen today that still matters ten years from now.

For information that must remain secret for decades, the useful life of the secret may outlast the useful life of today’s encryption.

Which is why “quantum isn’t here yet” can’t be the reason for “we can deal with it later.” For some organizations, later may already be too late.

The race is on…

And Naoris is warning that the current suggested solutions won’t work on their own.

Naoris seeks to build the next layer of the internet… post-quantum distributed trust

It’s doing it in a way that’s much different from the ‘centralized solutions’ fighting over the billions to be spent on post-quantum protection.

Standards will evolve and selling this idea to large enterprises moves slowly. Even the right technology doesn’t guarantee anyone adopts it.

For you… the investor… here is the case — Naoris has already done the groundwork to fight a problem that governments and corporations may now be forced to spend years solving.

And it has built a distributed designed to integrate with existing devices without replacing them and it will add them to the Trust Mesh.

That has the potential to make it an easier sale to companies and governments.

Relationships were announced…

Now, the next phase of the business is growing awareness and securing contracts.

Naoris has demonstrated it can build the technology…

Its current mission is to now spread the word to as many companies and governments as possible

Selling the tech is the point where many promising technology companies fail.

Because inventing something and then turning it into a global business are two entirely different jobs.

They’ve built the tech since 2018…

Now comes the second job. Commercialization.

Naoris is raising up to $24 million in this offering, and management says the capital is intended primarily to move the company from technology development and early commercial agreements into broader enterprise adoption.

That means building the teams needed to sell into some of the largest organizations on Earth:

These aren’t customers who see an ad on Tuesday and swipe a card on Wednesday.

Enterprise cybersecurity can mean technical evaluations, procurement reviews, compliance requirements, pilot programs, security audits and long sales cycles.

So the next stage of Naoris isn’t “build more technology.”

It must build the sales and marketing army to get this technology in front of the organizations that need it the most… and are hardest to sell to.

“Changing the Lock”… or Building a Better Firewall isn’t the Answer

Most of the post-quantum scramble is about cryptography. Companies must build locks a quantum computer can’t break.

Naoris uses post-quantum cryptography itself.

But again…

A stronger lock is still guarding a system that has to decide what it should trust.

Naoris isn’t just putting a stronger lock on the same old door.

It’s building a smarter fortress around it.

A fortress where the guards don’t simply assume the other guards are still trustworthy.

They continually check each other.

Naoris treats the quantum transition as more than a cryptography swap.

Post-quantum cryptography strengthens the locks.

Naoris’ distributed architecture is built with post-quantum tech…

But also helps secure what happens inside the fortress, too.

Because the quantum threat may be coming for the locks…

But as we’ve already seen, the intruder doesn’t always come through the front door. They come through the window… the pipes… or the cracks in the wall.

With Naoris you don’t have to rebuild the entire fortress…

No Rip-and-Replace

Imagine walking into a global bank and saying: “We’ve invented a better security architecture… but you’ll need to throw away millions of dollars of equipment and software.”

That’s a tough sales pitch.

Large organizations have spent decades building their tech stacks.

In government, energy and defense, some systems can’t simply be unplugged Friday and replaced Monday. You need months… even years of budget meetings to replace systems.

Naoris was designed around that reality.

It is designed to run alongside existing infrastructure — modern and legacy — rather than force customers to rebuild around it.

Strengthen the infrastructure you already have, rather than replace it.

Plugging into existing systems makes this a potentially easier sale for a major corporation or government entity.

That doesn’t make adoption automatic, of course. Integration still takes work, buy-in and approval.

But from a sales perspective, there’s an enormous difference between “replace your infrastructure” and “strengthen the infrastructure you already have.”

Just a Few Contracts Could Mean Large Recurring Subscription Revenue

Naoris isn’t trying to sell a product once.

Management’s commercialization model is built around enterprise licensing and subscription-style recurring revenue.

Once a technology is embedded in a company’s security… and it works…

A billion-dollar company could extend the tech across more devices, more locations, more modules, and ongoing licensing and support over time.

That alone means 1 major client could potentially be worth a healthy amount of revenue.

Naoris’ model is built on licensing and subscription revenue.

Disclaimer: This is not a forecast, and it is not a promise. Naoris has no commercial revenue to date, and there is no guarantee it signs any of these contracts. It is simply the shape of the opportunity: in a business like this, a small number of the right customers could change the picture quickly — which is exactly why the risk and the reward sit so close together.

Billions in competition dollars up for grabs just in the digital infrastructure space

And the early signs have begun.

As mentioned earlier, Naoris has its Korea JV interest with XCURE and its Electra AI partnership.

It’s early evidence that the post-quantum Trust Mesh is something the market may explore.

Just 1 major contract could be worth $10M+ in a year…

And that would potentially make Naoris’ valuation appear small next to what the market pays for post-quantum

Take a look at what the market is paying in this corner of quantum and security:

Figures as of late August 2026; sources in the footnotes. The filing places Cloudflare, Palo Alto, Fortinet and Cisco in an adjacent category rather than a competing one — which is precisely why their multiples are an execution benchmark, not a ceiling.

[VISUAL — bar chart of valuations on a log scale: Naoris (unstated) · Arqit $305M · SandboxAQ $5.75B · Quantinuum $10B · Cloudflare $104B. Sources: https://www.sandboxaq.com/press · https://www.quantinuum.com/press-releases/quantinuum-announces-pricing-of-upsized-initial-public-offering · https://stockanalysis.com/stocks/arqq/ · https://stockanalysis.com/stocks/net/statistics/]

Naoris has demonstrated it can build the technology.

First relationships were announced…

Now it needs to prove it can win at scale.

Naoris Quantum Protocol is raising up to $24 million at an implied pre-offering valuation.

Shares are priced at $4/share, with a minimum investment of 200 shares ($800).

The offering will only close if at least $15 million is raised and the shares are approved for listing on Nasdaq; if not, investor funds are returned.

Investing in a small, early-stage technology company bears substantial risks.

Naoris has built the architecture and filed provisional patents.. What it has not yet done is turn that into meaningful commercial revenue.

The company has a Korea JV interest and an Electra AI partnership. But the audited period showed no revenue, and the selling phase is only just beginning.

Banks, governments and infrastructure operators move slowly. They run pilots, security audits and procurement reviews that can stretch across many months. If that conversion takes longer than expected, revenue could stay limited for some time.

The capital is intended primarily to move the company from building the technology into selling it.

Please see the Company Deep Dive for the full use of proceeds.

Management expects the offering to fund at least 10 months at the minimum raise and 15 months at the maximum.

If commercialization takes longer than planned, Naoris would likely need to raise additional capital in the coming years, which could dilute existing shares.

There is no guarantee of a return on investor shares, and no guarantee that Naoris reaches commercial success.

If you’re considering investing in Naoris at $4/share, make sure you do full due diligence —read the Market Opportunity,the complete Company Deep Dive and the Offering Circular including the full set of risk factors before you decide.

READ THE COMPANY DEEP DIVE

See how it works, meet the people building it, and read the numbers before you decide.

Important Disclosures & Investor Notice

DISCLOSURE: All information contained in this communication should not be considered investment advice nor an offer to buy or sell securities, but for educational and informational purposes only. Investing in private or early-stage offerings (such as Reg A, Reg S, Reg D, or Reg CF) involves a high degree of risk. Securities sold through these offerings are not (most of the time) publicly traded and therefore illiquid. Additionally, investors will receive restricted stock that is subject to holding period requirements. Companies seeking capital through these offerings tend to be in earlier stages of development and have not yet been fully tested in the public marketplace. Investing in private or early-stage offerings requires a tolerance for high risk, low liquidity, and a long-term commitment. Investors must be able to afford to lose their entire investment. Such investment products are not FDIC insured, may lose value, and have no bank guarantee.

Naoris Quantum Protocol Inc. (the “Company”) has filed an Offering Circular relating to the Company’s securities, initially filed with the Securities and Exchange Commission (the “SEC”) on August 5, 2026 and forming part of the offering statement on Form 1-A qualified by the SEC on [●], 2026 (the “Offering Circular”). An investment in the Company’s securities involves significant risks. Please see the summary of certain risk factors set forth at the end of this communication and the more detailed discussion under “Risk Factors” in the Offering Circular before making an investment decision.

Summary of Risk Factors

The following risk factors, among others described more fully in the Offering Circular, should be considered carefully before investing:

Risks Related to the Company’s Business and Operations

Risks Related to the Company’s Technology and Products

Risks Related to the Company’s Market and Competition

Risks Related to Government Regulation and Compliance

Risks Related to Intellectual Property

Risks Related to Financial Condition and Capital Requirements

Risks Related to This Offering and the Company’s Securities