● NIST FIPS 204 · ML-DSA · RFC 9381 ECVRF

Randomness you
can prove.

A verifiable random-number API anchored to a 64-validator quantum-safe consensus. Every number ships with an ECVRF proof and a post-quantum Dilithium signature — so anyone can check it was fair, and no one can grind it. Not Math.random(). Not "trust us".

POST /v1/random  ·  live, keyless demo beacon: …

The browser then re-verifies the result against the published VRF + Dilithium keys — locally, with zero trust in this server.

Your provably-fair number
will appear here ✦
The mechanism

Three guarantees, one call.

01 · Unpredictable

Chain-anchored entropy

Each draw folds in the epoch's RANDAO beacon, produced by 64 validators via commit-reveal. No single party — including us — can know it in advance.

02 · Unforgeable

ECVRF proof (RFC 9381)

The output is the unique verifiable-random function of the input. We can't grind for a favorable result, and the 80-byte proof lets anyone confirm it.

03 · Tamper-evident

Dilithium attestation

The whole result is signed with ML-DSA-65 — quantum-safe today, still valid after Q-day. Change one digit and verification fails.

# Generate — returns numbers + proof + signature
curl -X POST https://api.quantumwing.io/v1/random \
  -H "Authorization: Bearer qw_live_…" \
  -d '{"min":1,"max":1000000,"count":1}'

# Verify — anyone, offline, no API key
curl -X POST https://api.quantumwing.io/v1/verify \
  -d @result.json   → { "valid": true }
Pricing

Start free. Scale when fair matters.

Free
€0
  • 1,000 calls/mo
  • 10 req/min
  • Full proofs
  • Sandbox
Starter
€29
  • 50,000 calls/mo
  • 60 req/min
  • Full proofs
  • Email support
Pro
€199
  • 500,000 calls/mo
  • 300 req/min
  • Audit reports
  • Priority support
Enterprise
Custom
  • Unlimited
  • Dedicated validators
  • SLA 99.99%
  • On-prem option