Matomo

Fully blown products, frameworks, libraries. Data security, any form factor you want. - Cossack Labs
Cossack Labs
search
All products

Fully blown products, frameworks, libraries.
Data security, any form factor you want.

Form-factor:
Platform:
Licensing:

Results (5)

Themis

Themis

A CROSS PLATFORM CRYPTO LIBRARY
Themis is a high-level cryptographic services library for securing data during authentication, storage, messaging and network exchange. It provides easy-to-use and hard-to-misuse API and prevents developers from making security mistakes.

Works best with:
Multi-platform apps, mobile apps, document exchange, chats.

Industries:
Finance, Healthcare and wellness, B2C, SaaS.

Solves:
90% typical use cases related to secure data storage and transmission.

Platforms: Mobile, Web, Electron, WASM, IoT, On prem, Cloud

Licensing: Open-source Apache 2.0

Read more about ThemisRead more about Themis
Acra

Acra

A DATABASE SECURITY SUITE
Acra combines 9 security controls in one suite, pluggable as SQL proxy, API service or SDK in your architecture. Its features include field level encryption, searchable encryption, data masking and firewalling. Acra prevents data leaks from insiders and outsiders.

Works best with:
SQL/NoSQL databases, API services, web apps, telemetry systems.

Industries:
Finance, Critical infrastructure, Healthcare, B2B, SaaS.

Solves:
Encrypted data storage and processing with searchable encryption.

Platforms: Database, Cloud, On prem, IoT, Web

Licensing: Open-source Apache 2.0, Proprietary

Read more about AcraRead more about Acra
Hermes

Hermes

END-TO-END SECURE DATA STORAGE
Security framework for enabling multi-user end-to-end encrypted data storage, sharing and access control in the application. Provides cryptographically protected data processing and data collaborating without the need to re-encrypt an excessive amount of data.

Works best with:
Distributed apps, EHR systems, document exchange.

Industries:
Finance and banking, Critical infrastructure, Healthcare, B2B, Blockchain.

Solves:
End-to-end encrypted data collaboration and cryptographic access control.

Platforms: Web, On prem, Cloud

Licensing: Open-source AGPL 3.0

Read more about HermesRead more about Hermes
Toughbase

Toughbase

Data management application platform built around Hermes, which provides end-to-end encrypted storage and sharing layer on top of traditional server infrastructure. Provides out-of-the-box tools to integrate Hermes with modern databases and distributed applications.

Works best with:
Large scale infrastructures, distributed apps, document exchange.

Industries:
Finance and banking, Critical infrastructure, Healthcare, B2B.

Solves:
End-to-end encrypted data collaboration within the whole infrastructure.

Platforms: Web, On prem, Cloud

Licensing: Proprietary

Read more about ToughbaseRead more about Toughbase
Ts-s, to be announced

Ts-s, to be announced

THERE’S SOMETHING WE’RE PREPARING

Product security and stability

  • Until otherwise agreed, our products come as a “boxed” solution and are integrated with your apps and infrastructures.

    Our software doesn't need any connections to our servers, doesn't have "admin" or "backup" keys, doesn't steal or send data “back home”.

  • Our software doesn’t require internet access to operate, it has no “admin panel”, no debug routes, no built-in analytics or tracking, and no “insecure” mode.

    You fully control it.

  • Our products use strong modern audited cryptography under the hood: AES-GCM-256, AES-CTR-256, ECC + ECDSA, RSA + PSS + PKCS#7, ECDH, HPKE-like scheme, SMP-like scheme, PBKDF2, HMAC-SHA-256, ZRTP-KDF, etc.

    Thanks to the modular architecture, it is possible to build custom flavors of Themis and Acra using crypto-primitives of your choice, like FIPS 140-2 or GOST-compatible.

  • Once data is encrypted, only a party that has access to decryption keys, can decrypt it. We don’t have any “magical” spare keys. Store keys securely, or talk to us to use SSS-like schemes.

  • Our software engineers are trained about secure architecture and secure coding, and write code based on platform-specific security guidelines, NIST publications, OWASP guides (SAMM, ASVS, MASVS, Cheatsheets) and security industry best practices.

  • Each change in our products is being reviewed and approved by our internal team of software engineers and security engineers. For every change in the cryptographic layer, we perform internal audits by cryptographers who don’t work on our products, or external audits with world renowned cryptographic engineers. We work with reputable 3rd party security engineers to review security of our product on major releases.

  • Our products heavily use automated security testing tools: static code analysers, fuzzing tools, memory analysers, unit tests (for each platform), end-to-end tests (to test the whole use cases), platform compatibility tests (to find compatibility issues between different platforms), version compatibility tests. For Themis, the estimated LoC of tests are 10x than LoC of the core code.

    Tests run on every PR, every night and before releases.

  • The statistical test developed by NIST is used to verify the quality of pseudo-random number generators in the donor libraries. For symmetric encryption, we also run a selected set of NIST-recommended tests for AES-256. Such test sets contain both the initialisation vectors and the expected output.

  • We use dependency management tools to monitor 3rd party libraries used in our products, we triage notifications and update dependencies on an ongoing basis.

  • In the event of finding a critical bug in products or their dependencies, patch is created and all customers are notified via their contact emails or by an agreed support channel. For open source users we post a GitHub issue and publish a new update, they can receive notification via GitHub according to their settings.

Product news & latest releases

We follow a slow update cycle with urgent releases only dealing with compatibility issues.

Cloud security: gaps in a "shared responsibility" model

Cloud security: gaps in a "shared responsibility" model

In this article we observe security responsibility of cloud providers: where it ends, what are the gaps and grey areas, and what risks security teams should take into account when using ...
Solutions for finance

Solutions for finance

Unlocking sensitive data value in Finance Most current privacy regulations require state-of-the-art encryption when it comes to sensitive data protection. The scope of sensitive data h...
Сryptographic IP protection for AI/ML-driven product Сryptographic IP protection for AI/ML-driven product

Сryptographic IP protection for AI/ML-driven product

ML & TensorFlow B2C app Сryptographic IP protection for AI/ML product Brought to the limelight, the product team behind the [REDACTED]'s application was looking for a high-profile...

Contact us