Themis
A CROSS PLATFORM CRYPTO LIBRARY
Themis provides easy-to-use and hard-to-misuse encryption API for securing data at rest and in transit, and is available across multiple platforms.
Works best with:
Multi-platform apps, mobile apps, document exchange, chats.
Industries:
Finance, Healthcare and wellness, B2C, SaaS.
Solves:
90% typical use cases related to secure data storage and transmission.
Platforms: Mobile, Web, Electron, WASM, IoT, On prem, Cloud
Licensing: Open-source Apache 2.0
Form-factors: In-app SDK
Acra
A DATABASE SECURITY SUITE
Acra provides application level encryption, masking, tokenisation, access control, database leakage prevention, and intrusion detection for modern data-processing apps.
Works best with:
SQL/NoSQL databases, API services, web apps, telemetry systems.
Industries:
Finance, Critical infrastructure, Healthcare, B2B, SaaS.
Solves:
Encrypted data storage and processing with searchable encryption.
Platforms: Database, Cloud, On prem, IoT, Web
Licensing: Open-source Apache 2.0, Proprietary
Form-factors: API service, SQL proxy, DAO, In-app SDK
Hermes
END-TO-END SECURE DATA STORAGE
Hermes is end-to-end secure data storage that provides processing and sharing framework with zero trust to storage/exchange infrastructure.
Works best with:
Distributed apps, EHR systems, document exchange.
Industries:
Finance and banking, Critical infrastructure, Healthcare, B2B, Blockchain.
Solves:
End-to-end encrypted data collaboration and cryptographic access control.
Platforms: Web, On prem, Cloud
Licensing: Open-source AGPL 3.0
Form-factors: In-app SDK, DAO
Toughbase
Data management application platform built around Hermes, which provides end-to-end encrypted storage and sharing layer on top of traditional server infrastructure. Provides out-of-the-box tools to integrate Hermes with modern databases and distributed applications.
Works best with:
Large scale infrastructures, distributed apps, document exchange.
Industries:
Finance and banking, Critical infrastructure, Healthcare, B2B.
Solves:
End-to-end encrypted data collaboration within the whole infrastructure.
Platforms: Web, On prem, Cloud
Licensing: Proprietary
Form-factors: API service, DAO
THERE’S SOMETHING WE’RE PREPARING
Please stay tuned for further announcements.
Product security and stability
Product news
& latest releases
We follow a slow update cycle with urgent releases dealing with compatibility issues.
Themis
- Themis is a cryptographic library, perfect for solving data security use cases in the most applications.
- Themis supports 14 languages and platforms and provides 100% compatible API across them.
- Themis is recommended by OWASP as a cryptographic library for mobile apps.
- Themis hides cryptographic details, preventing developers from making security mistakes.
- Themis provides strong modern industry-proven cryptography.
- Themis is open source and can be used for free.
Acra
- Acra database security suite protects sensitive data in databases and distributed applications.
- Acra is one tool that covers 9 data security controls.
- Acra works with SQL and NoSQL databases, on-prem or in any cloud environment.
- Acra gives field-level encryption for sensitive data and supports BYOK/HYOK.
- Acra easily integrates into modern applications, protecting sensitive data on the every step of its lifecycle.
- Acra Community Edition is open source and can be used for free.
- Acra Enterprise Edition is tailored for businesses with multiple apps or databases.
Hermes
- Hermes is a security framework for enabling multi-user end-to-end encrypted data storage.
- Hermes provides the essential building blocks for building zero-knowledge and zero trust architectures.
- Hermes prevents data leakage or misuse even if the server infrastructure is compromised.
- Hermes core engine is open source.
Cossack Labs team
- Cossack Labs team includes experts with formal backgrounds and PhDs in cryptography, OWASP contributors, CISSP-certified security engineers, security software developers, and security engineers with decades of industry experience.
- Cossack Labs team members gave more than 60 conference talks in 6 years. You can meet us at the international security and development conferences as QCon, DefCon, UA.SC, BlackAlps, NSSpain, FrenchKit, Devops Stage, OSDN, muCon, iOSCon, Highload fwdays, OWASP meetups and OWASP Appsec global events, NoNameCon, and others.
- September, 2024 – Acra Community Edition 0.96.0 is released, improving user experience and expanding compatibility.
- August, 2024 – Introducing Cossack Labs Mobile Security Score (CL MSS)—a mobile security verification framework for product security, security assessments, SSDLC, and measuring security posture.
- April, 2024 – Cossack Labs joins UA DroneID technology development to improve operational capabilities of unmanned systems.
- February, 2024 – Cossack Labs partners with NPC UKRENERGO to strengthen Ukraine’s power grid cybersecurity.
- May, 2022 – Releasing RepoMetaScore (repository metadata scoring): a dependency-checking tool that analyzes metadata of open-source projects, including commit history and contributors’ background. RepoMetaScore calculates risk rating, makes supply chain risks visible and prevents weaponizing OSS.
- August 20, 2022 – Launch of Shift Security Left newsletter for security-aware developers. Later, it became a Hackernoon Noonies'22 Best General Technology Newsletter runner-up in emerging tech.
- May, 2022 – Acra 0.93.0 introduces the type awareness feature, enabling fully transparent encryption, decrypting and decoding binary data back to the original type.
- November, 2021 – Acra 0.90.0 is released, making fundamental security controls previously available in proprietary versions accessible to a wider audience.
- October 20, 2020 – Acra won Best Open Source Project in the Hackernoon Noonies contest.
- July 9, 2020 – With version 0.13.0 released, Themis officially supports 14 languages and platforms.
- September 5, 2019 – Cossack Labs implemented end-to-end encryption into popular Apple Design Award app Bear.
- April 16, 2019 – Acra encryption suite became available on DigitalOcean Marketplace.
- March 15, 2019 – More flexible configuration for AcraCensor and server-side encryption mode for AcraServer are introduced.
- November 9, 2018 – With version 0.84.0 New Horizons, Acra grew from a database encryption proxy to a full-fledged data encryption suite.
- December 13, 2017 – A proof of concept version of Hermes introduced.
- March 8, 2017 – First Acra open-source release (0.75) revealed.
- June 3, 2015 – Themis is released into the public.
- May 18, 2015 – Launch of Themis high-level cryptographic services library.
- June 19, 2014 – Launch of Cossack Labs private limited company in United Kingdom.
