# Nick Sullivan

Nick Sullivan works in cybersecurity, focusing on post-quantum cryptography and helping organizations think through its adoption. He also advises and consults with founders and companies on security and privacy technology.

- Profile: https://b2binfluencer.marketing/creators/nick-sullivan/
- LinkedIn: https://www.linkedin.com/in/ntsullivan
- LinkedIn followers: 5,455
- Topics: cybersecurity, post-quantum-cryptography
- Based on 9 dated posts, latest 2026-09-08

## Summary

Nick Sullivan is most useful for post-quantum cryptography migration advice, not sponsored posts.

- Best for: Cybersecurity companies needing technical advisory for enterprise PQC migration planning.
- Not for: Paid audience placement or sponsored posts with guaranteed impressions and metrics.
- Check first: Confirm current availability, advisory scope, deliverables, fees, and prior advisory outcomes.

### Takeaways

- NIST's first three post-quantum standards are finalized and explained.
- Google and Cloudflare moved post-quantum cryptography into production.
- Privacy technology is weakening a common security shortcut.

## Main ideas

- **Post-quantum cryptography has shifted from standards work to migration planning**: Sullivan argues that NIST's first three finalized post-quantum standards give organizations concrete algorithms to adopt: FIPS 203 ML-KEM for general encryption, FIPS 204 ML-DSA for digital signatures, and FIPS 205 SLH-DSA as a backup if ML-DSA proves vulnerable. Since major platforms have already put PQC into production, businesses should move internal and external services to support it, following NIST guidance rather than treating quantum risk as a distant research topic.
- **Privacy technology is weakening a common security shortcut**: Sullivan argues that privacy tools such as multi-hop proxies, including iCloud Private Relay, are making IP reputation less useful for identifying threat actors. Security services can no longer assume an address reliably indicates a bad actor's origin, so they need new detection methods.
- **Attestation can matter even without confidential encryption**: Sullivan argues that confidential computing's value extends beyond running encrypted workloads on untrusted computers. Organizations also benefit from verifying that specific software is running, even without cryptographic guarantees of confidentiality.
- **Production security tooling is getting too complex and costly**: Sullivan argues that security scanning and threat-mitigation systems for production workloads are becoming more complex and expensive, in both cost and staffing. They attribute this to systems often being bolted onto existing infrastructure and major cloud providers under-investing in making them affordable and easy to use.
- **Advisory work is Sullivan's route for applying hard-won PQC and security experience**: Sullivan presents advisory and consulting as practical ways to help founders, engineers, and organizations navigate security, privacy, and post-quantum migration. They offer brainstorming, company-building advice, consulting projects, board positions, and PQC migration consultations—not just commentary.

## Work to read

- [NIST’s first three post-quantum standards, explained](https://www.linkedin.com/posts/ntsullivan_nist-releases-first-3-finalized-post-quantum-activity-7229126454758821891-7c9S)
- [What founders and engineers are asking about security and privacy](https://www.linkedin.com/posts/ntsullivan_intro-book-with-nick-sullivan-activity-7100194311245287425-kuGP)
- [Why Google and Cloudflare moved post-quantum cryptography into production](https://www.linkedin.com/posts/ntsullivan_why-google-now-uses-post-quantum-cryptography-activity-7113563606452957184-w0Qy)

## Brand relationships

- **Cloudflare** (disclosed_partnership)
- **Intro** (mention)
- **NIST** (mention)
- **Google** (mention)

## Partnerships

Sullivan's public posts document consulting and advisory work, not sponsorship products. In a September 2023 post, they say they are open to consultations on post-quantum cryptography migration and cite their involvement in Cloudflare's industry-leading transition to post-quantum cryptography. In an August 2023 post, they describe launching a profile on Intro, booking calls with founders and engineers, and welcoming pitches for consulting projects or board positions. The practical shape of an engagement is technical advisory on security and privacy problems rather than audience promotion. The posts provide no rate card, sponsored-content format, deliverable list, audience-package description, or official partnership inquiry route; ask directly about terms. They cover only three posts between August 2023 and August 2024, so may not reflect Sullivan's current commercial posture.

## Alternatives

- Kostiantyn Polosukhin: Choose Polosukhin when the buyer's hard problem is finding quantum-vulnerable cryptography in code, configuration files, keys, and certificates, or when the engagement needs a working scanning habit rather than a strategy document. The HarvestGuard post describes a tool that scans those assets before an attacker does, and the manufacturing-tech post shows how advanced technologies are translated into an operator's integration checklist. For a cybersecurity company whose customers ask where their cryptography is rather than which NIST standard applies, this is a more concrete starting point than a standards-and-deployment narrative.
- Ben Volkow: Choose Volkow when the buyer needs a governance- and inventory-first readiness program, especially in federal or regulated critical-infrastructure contexts. The G7 and ANSSI post lays out the operational fundamentals in order: discover where cryptography is used, keep a cryptographic inventory, use a machine-readable CBOM to map dependencies, assess quantum risk, and establish governance and a migration roadmap. The executive-order post focuses on turning federal mandates into funded, measurable execution across healthcare, finance, energy, and telecom. For buyers whose PQC engagement starts with the fact that they cannot manage what they have not inventoried, this is a better match than an explainer on finalized standards and early deployments.
- Chaitanya Challa: Choose Challa when the buyer's bottleneck is dependency mapping and migration orchestration across a large regulated enterprise, particularly in banking, healthcare, or critical infrastructure. The Treasury post describes a sequence: discovery, dependency mapping, risk prioritization, crypto agility, migration orchestration, continuous readiness. It explains that a bank can migrate its own RSA and ECC implementations while exposure remains in SaaS platforms, HSMs, payment systems, APIs, software libraries, and market infrastructure. The executive-order post adds the operational reality of modernizing cryptography across applications, devices, OT, medical technology, hardware, supply chains, and accumulated technical debt. For buyers whose PQC strategy keeps stalling on third-party and legacy-system dependencies, that framing is more useful than a standards summary.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/