Cossack Labs
Cossack Labs
- Acra
Acra: protect sensitive data in your web app Sensitive data encryption and intrusion prevention system for SQL/KV backends. Built for protection of sensitive commercial and personal data in modern web and distributed apps. Microservice-friendly, cloud-ready. Learn more Get Acra
- Toughbase
Toughbase: end-to-end data lifecycle protection End-to-end encrypted platform for secure storage and processing of sensitive data throughout it's lifecycle. Built for protection of sensitive data in healthcare, banking, and various consumer applications. Learn more
- Hermes
Hermes: manage access cryptographically Framework for building multi-user end-to-end encrypted data storage and sharing/processing with zero leakage risks from the infrastructure. Works for mobile, web, or server applications storing data in databases. Read more Get Hermes
- Themis
Themis: integrate data protection into your code Cross-platform crypto library for mobile, desktop, server, and IoT. Secures the data in authentication, messaging, APIs, storage, transit. Provides simple API, available for many platforms and languages. Read more
Data security tools for tech-driven businesses
Open Source Crypto
The core crypto/security modules of our products are open-source for the ease of public assessment, supplied with documentation, white-papers, and other learning resources.
Cloud-ready / on-prem
Proprietary versions of our software can run on several cloud platforms (GCP, AWS), support cloud KMS, can be deployed on-premises, in private clouds, and have many conveniences.
Consulting and support
Whether you’re building a highly customised product or want to perform a risk assessment – our advanced security integration assistance service is here to help.Security engineering, built to fit you.
Encryption prevents data leakage and misuse even in partially-compromised systems, narrowing attack surface to a small subset of components. Aside from encryption, our tools provide audit logging, intrusion prevention and detection wherever sensitive data is used.
Managing security tools in production can get extremely inconvenient. Our tools are built with modern engineering practices in mind and focus on preserving security. We strive to provide usability so they are also fast to integrate and easy to manage.
We use industry-tested crypto-primitive implementations (OpenSSL, BoringSSL, certified proprietary implementations); our own core crypto components are open-source.
Breaches happen where the security is weak. Our tools aim at covering the complete lifecycle of the sensitive data in your product, combining cryptography and additional security measures.
Our tools easily integrate with typical components used in your system, scale well, use popular deployment schemes and application layouts, support industry-standard monitoring.
We focus on helping your engineers get the job done, without getting PhD in security. We keep the intricate cryptographic details under the hood, providing unambiguous API for developers, secure by default.
Assistance program to get you started with security
Flat fee
Comprehensive, one-time service.
Handled with care
Security by security professionals.
Dev from Devs
Tools we bring are tools we've built.About DGAP
DataGuardian Assistance Program is an instant assisted security solution. Our experts will help you understand and avert practical data security risks your application is facing.Request more info:
DGAP overview
Want to know more? Here's a brief overview of how DataGuardian Assitance Program by Cossack Labs helps your product, what's inside the service, and how to start.Recent blog posts
-
15 Aug 2016
Classic backend security design patterns
In upcoming series of articles, we'll ascend from classic database security techniques to modern technologies, including some of the cutting edge research and our own experiments in the field. -
27 Jul 2016
Zero Knowledge Protocols without magic
In this post, we talk about Zero-Knowledge Proofs, tie ZKP authentication to traditional security models and help you understand better how authentication, in general, should work. -
20 Jul 2016
Perimeter security: avoiding disappointment, shame and despair
Lighter reading: general thoughts on how the familiar mindset of 'protect the perimeter' changed over time.
WHO WE ARE
Cossack Labs develop powerful, easy-to-use data security tools for software developers, empowering organisations to minimise losses from security incidents and breaches.
click here to learn more
