# Message test — https://quantumnetwork.ch/

After reading your page, 11 of 15 personas could name a reason to pick you over a similar option.

- **Page tested:** https://quantumnetwork.ch/
- **Audience tested against:** board members of entities with critical infrastructure
- **Personas:** 15 simulated
- **Report:** https://grader.wynter.com/r/quantum-network-fS5Bt1E

> These answers are generated by AI, scored on Wynter's B2B Message
> Layers framework using behaviorally-diverse simulated personas. The
> methodology is real and the critique is directional. What a simulated
> persona cannot have is a live budget, a renewal coming up, or a boss
> asking about this quarter.

---

## 01 · The scores

Every persona answered all four questions. These are four independent
proportions of the same panel, not stages of a funnel.

| Layer | Question | Cleared the bar | Strength | Of those who passed |
| --- | --- | --- | --- | --- |
| 1. Clarity | Do they understand what you do? | 15/15 | 82% | 3 without hesitation, 12 with reservations |
| 2. Relevance | Can they tell what it solves, and who it's for? | 15/15 | 85% | 5 without hesitation, 10 with reservations |
| 3. Value | Do they actually want it? | 15/15 | 78% | all with reservations |
| 4. Differentiation | Is there a reason to pick you over the alternatives? | 11/15 | 63% | all with reservations |

**Brand alignment** (a side metric, not one of the four layers) — 14/15, 74% strength (all with reservations). Does the page read like the company you actually are?

**Fix first: Differentiation.** Earliest failing layer, walking the sequence in order — not simply the lowest score.

---

## 02 · What to change, layer by layer

Ordered worst-first. Specific edits, not a restatement of the score.

### Differentiation

**Add a line on offline and air-gapped licensing and self-restart under the Crypto-agile card.**

A reader cannot tell whether the box needs a call-home to license or recover after a power cut. State that licensing works offline and the gateway restarts unattended.

*effort medium · impact high · tested against Answer the live objection*

**Move the no-telemetry, no-cloud-dependency claim into the hero, above the feature grid.**

The one thing that separates this gateway from cloud-managed VPN appliances sits buried below the diagrams. Put a line in the hero saying the gateway runs with no telemetry and no cloud dependency.

*effort low · impact high · tested against Give a reason to choose you*

**Rewrite the "Quantum safe network security" headline to name the post-quantum VPN gateway.**

The heading reads as a category slogan any security vendor could use, so buyers file the product as a generic VPN appliance. Say plainly it is a post-quantum VPN gateway for OT sites.

*effort low · impact medium · tested against Lead with the use case*

### Clarity

**Add a line under the Crypto-agile card stating what happens when a subscription lapses.**

"An active subscription updates the software" leaves buyers unsure whether encryption stops when the subscription ends. State that the gateway keeps encrypting and only algorithm updates pause.

*effort low · impact medium · tested against Answer the live objection*

### Relevance

**Name the sectors in the subhead under "Quantum safe network security".**

Buyers work out that this is for OT and critical infrastructure from icons and diagrams rather than words. Name water, energy, ports and airports and the OT or ICS security owner in the subhead.

*effort low · impact medium · tested against Name the audience*

### Value

**Add throughput and added-latency figures per gateway model beside the Hardware card.**

Nothing on the page says whether the gateway will slow a SCADA link. Publish throughput and added latency numbers next to the hardware description.

*effort medium · impact high · tested against Specifics beat superlatives*

### Brand alignment (side metric)

**Label the Red Hat, Advantech, OnLogic, NIST row as technology partners, not customers.**

The unlabeled logo row reads as customer references and then disappoints. Add a caption naming what the row is, and place any customer names separately.

*effort low · impact medium · tested against Proof next to the claim*

---

## 03 · What is working

### The drop-in, nothing-gets-replaced deployment story lands as the clearest and most…

Seven respondents read the page as a hardware gateway that encrypts OT traffic without replacing SCADA/PLCs or redesigning the network. They tied this directly to reduced retraining, re-certification and routing workload.

> The "nothing on your sites is replaced" line is the one that would stick with me because it answers my first worry, which is workload on my team.
> 
> — Board Member, Transportation, 501-1000

> my team gets quantum-safe encryption on the links between our sites, control rooms and remote users without touching SCADA, PLCs or ripping out anything — "nothing on your sites is replaced" is the line that matters to me because it means no retraining, no re-certifying control systems
> 
> — Board Member, Transportation, 501-1000

> "your IT team only needs to add or adjust a few routes," tells me the workload hit is a rack-mount and a routing change, not a migration project. It's worth a 30-minute call on that basis alone, especially since they offer it with no contact details required
> 
> — Board Member, Transportation, 501-1000

> They sell hardware gateways that bolt quantum-resistant encryption onto existing SCADA/OT links without ripping out your firewall or PLCs — basically a drop-in VPN-style box pair
> 
> — Director of Infrastructure Security, Utilities, 501-1000

> What made it click was the concrete diagram of gateway-at-each-end plus the "nothing removed, just add a route" framing — that's a real deployment story, not just buzzwords.
> 
> — Board Member, Transportation, 5000+

> "SCADA, PLCs, sensors and cameras keep working as they do today" and the logos (Advantech, OnLogic, NIST) I inferred OT/critical-infrastructure IT leadership without much effort
> 
> — Chief Information Officer, Critical Infrastructure, 1001-5000

### Respondents understood the product as quantum-safe encryption for OT operators

Five respondents stated the core proposition back accurately: post-quantum encryption for OT and critical infrastructure. Two noted the page states the problem and audience upfront.

> They make a hardware box called a "Quantum Gateway" that you drop into your existing network, one on each end of a connection, to encrypt traffic between sites, remote workers, or cloud environments so it can't be cracked once quantum computers arrive.
> 
> — Board Member, Transportation, 501-1000

> the diagram callouts — SCADA, PLCs, sensors, control rooms, "critical OT environments" — make it obvious pretty fast that this is aimed at industrial/utility-type operators like me
> 
> — Director of Infrastructure Security, Utilities, 5000+

> the H1 "Quantum-safe encryption for multi-site networks" and the subhead "Deploy quantum-safe encryption across existing connections without redesigning your network" told me the problem (harden site-to-site/OT/remote-access traffic against future quantum decryption without ripping out infrastructure) in the first two lines.
> 
> — Board Member, Transportation, 1001-5000

### The 'no telemetry, no cloud dependency' line is the differentiator respondents can…

Six respondents named no telemetry and no cloud dependency as the concrete differentiator versus cloud-managed competitors. Two extended it to offline/air-gapped licensing and self-restart behavior as evidence of OT-specific engineering.

> The specific thing that would push me toward this one over a competitor is "no telemetry is sent to the manufacturer, and there is no dependency on third-party cloud services" combined with "no activation is required: the licence is included, pre-installed and bound to the serial number."
> 
> — Board Member, Transportation, 501-1000

> "no telemetry sent to the manufacturer, and no dependency on third-party cloud services" line plus "after a power failure, the gateway restarts by itself and continues operating" — that's the kind of detail that matters for OT
> 
> — VP of Critical Infrastructure, Energy, 1001-5000

> for OT and critical infrastructure links, air-gapped/offline-capable security tooling with no phone-home is a real differentiator, not fluff.
> 
> — Board Member, Transportation, 5000+

> "no telemetry is sent to the manufacturer, and there is no dependency on third-party cloud services" line plus "the licence is included, pre-installed and bound to the serial number" — that's a specific, checkable design choice, not marketing fluff, and for a gov OT shop it's a real differentiator against competitors who route through vendor cloud dashboards
> 
> — Chief Security Officer, Government, 501-1000

---

## 04 · What the personas said

### Commercial and technical terms are left undefined

Two respondents could not determine what happens if the subscription lapses, what crypto-agility covers beyond ML-KEM/FIPS-203, or what it costs.

> they never say what happens to the encrypted link if that subscription lapses, and if a competitor states plainly that gateways fail open, fail closed, or keep running on last-known-good algorithms, that answer wins the deal
> 
> — Chief Information Officer, Critical Infrastructure, 5000+

> The crypto-agility line is the culprit: "when the algorithms change, an active subscription updates the software" never says which algorithm families are supported beyond ML-KEM/FIPS-203, so "crypto-agile" is a label without a definition
> 
> — Board Member, Transportation, 5000+

### No performance data or named production customer backs the claims

Six respondents flagged missing latency, throughput, failure-rate and independent validation data, plus absent per-site pricing. Several said the value case only closes with a named reference customer, one specifying a utility running six months in production.

> zero proof it survives a real plant environment, just diagrams and NIST algorithm names
> 
> — VP of Critical Infrastructure, Energy, 1001-5000

> the page gives me no numbers: no latency overhead, no failure rate, no independent validation beyond citing FIPS-203
> 
> — Chief Security Officer, Government, 1001-5000

> I'd need a reference customer in a similar OT environment, the actual routing/firewall placement diagram for our topology, and clarity on what happens to traffic if the subscription lapses
> 
> — Chief Information Officer, Critical Infrastructure, 5000+

> One verifiable reference: a similarly-sized utility or critical-infrastructure operator with this gateway live on a real SCADA link for at least six months, and someone I can actually call
> 
> — Director of Infrastructure Security, Utilities, 501-1000

> But "worth a meeting" hinges on numbers I didn't see: latency/throughput overhead of the gateway, actual failover behaviour beyond "restarts after power failure," and price per site.
> 
> — Board Member, Transportation, 5000+

### Vendor stability is unverifiable and the logo row does not read as customer proof

Two respondents wanted company history and size to assess stability, and one read the logo row as partner badges rather than customer references.

> there's no company history, no size, no named industry vertical beyond generic "critical infrastructure," so I can't tell if this is a two-year-old startup or an established OT security player
> 
> — VP of Critical Infrastructure, Energy, 1001-5000

> The logo row (Red Hat, Advantech, OnLogic, NIST) reads like partner/hardware-supplier badges, not customer logos, which tells me they're still building credibility rather than showcasing a client base.
> 
> — VP of Critical Infrastructure, Energy, 5000+

### The target sector is inferred from diagrams and icons rather than named

Four respondents said they worked out the buyer and use case from OT icons, diagrams and context clues instead of explicit sector naming.

> I inferred the reader from the diagrams and industry logos rather than a direct sentence naming the buyer
> 
> — Chief Security Officer, Government, 1001-5000

> I inferred the specific persona from the icons and examples rather than a direct sentence naming me
> 
> — Chief Information Officer, Critical Infrastructure, 5000+

> I'd want my own sector named explicitly — energy, grid, utility — not just "OT" and generic examples like solar parks and water treatment
> 
> — VP of Critical Infrastructure, Energy, 501-1000

### The product is placed as a VPN appliance, not a new category

One respondent categorized it as a VPN appliance with post-quantum cryptography rather than something novel.

> not some new category, just VPN concentrators with a different cipher suite and a crypto-agility subscription model
> 
> — Chief Information Officer, Critical Infrastructure, 5000+

---

## 05 · The hardest read

An adversarial pass over the findings. Every claim below was checked
against the panel's own answers; unsupported ones were dropped.

- **The page asks for a security purchase decision while withholding every number a buyer needs to make it.** *(high)*
  Five respondents flagged missing latency, throughput, failure-rate, independent validation and per-site pricing; two more could not determine subscription lapse terms or cost. Comprehension is high, but nothing on the page can be evaluated.
- **Comprehension is being mistaken for persuasion — the page explains itself well and proves nothing.** *(high)*
  Nine respondents across two themes restated the proposition and deployment story accurately, yet five demanded a named production reference and two could not verify the vendor exists at scale. Understanding the claim is not believing it.
- **The logo row actively damages credibility by reading as partners where customers were expected.** *(high)*
  One respondent read the row as partner badges rather than customer references, while five separately said the value case only closes with a named reference — one specifying a utility six months in production. The page's only social proof answers the wrong…
- **The single differentiator is a negation, and negations are trivially copied by any competitor willing to ship an on-prem build.** *(medium)*
  Six respondents named 'no telemetry, no cloud dependency' as the concrete differentiator, and one categorized the product as a VPN appliance with post-quantum crypto rather than anything novel. Absence of cloud is a configuration, not a moat.
- **Making buyers decode their own relevance from icons costs the page every reader who does not bother.** *(medium)*
  Four respondents inferred the buyer and use case from OT icons and diagrams instead of explicit sector naming. The ones who worked it out were tested and paid attention; a live visitor is not.
- **The strongest asset on the page — drop-in deployment — is asserted operationally and never quantified.** *(medium)*
  Five respondents tied the nothing-gets-replaced story to reduced retraining, re-certification and routing workload, yet five others said the value case needs latency, throughput and failure-rate data. The claim most likely to close the deal is the one with…

---

## 06 · Who answered

| # | Role | Industry | Company size |
| --- | --- | --- | --- |
| 1 | Board Member | Transportation | 501-1000 |
| 2 | Chief Security Officer | Government | 1001-5000 |
| 3 | Chief Information Officer | Critical Infrastructure | 5000+ |
| 4 | Director of Infrastructure Security | Utilities | 501-1000 |
| 5 | VP of Critical Infrastructure | Energy | 1001-5000 |
| 6 | Board Member | Transportation | 5000+ |
| 7 | Chief Security Officer | Government | 501-1000 |
| 8 | Chief Information Officer | Critical Infrastructure | 1001-5000 |
| 9 | Director of Infrastructure Security | Utilities | 5000+ |
| 10 | VP of Critical Infrastructure | Energy | 501-1000 |
| 11 | Board Member | Transportation | 1001-5000 |
| 12 | Chief Security Officer | Government | 5000+ |
| 13 | Chief Information Officer | Critical Infrastructure | 501-1000 |
| 14 | Director of Infrastructure Security | Utilities | 1001-5000 |
| 15 | VP of Critical Infrastructure | Energy | 5000+ |

---

## 07 · Before you act on this

The methodology is real, and the critique is directional. What a
simulated persona cannot have is a live budget, a renewal coming up, or
a boss asking about this quarter. **Validate anything you're betting on
with real ICPs who are actually in-market.** Being wrong is more
expensive than you think. Finding out is cheaper than you'd guess.

Wynter runs message testing with verified B2B professionals — trusted
by HubSpot, RingCentral, Shopify, Cognism, Paddle, Veeam, Rippling and
Miro. <https://wynter.com>

This report is kept for 60 days from 2026-09-29, then deleted along with the personas and their answers.

