Crypteron Community Edition

Enterprise data security. Now for startups too.

Data security is not optional

We built Crypteron after observing two things again and again:

Securing sensitive data properly is difficult, risky and time consuming
Most professionals do not realize #1

The past few years have seen an explosion of new applications in the healthcare, finance and government spaces. At the same time, data breaches are increasing at an alarming rate. Why does this keep happening?

Talented developers are NOT cybersecurity experts

It's true. Most developers underestimate the complexities of data security and end up adding cryptography to their code incorrectly. This isn't because they are weak or junior developers. On the contrary, we've seen them to be extremely talented developers who are unfortunately very short on time with a large TODO list. If giant organizations like Target, Citibank, JP Morgan Chase and the United Stated Government can't protect their data - what hope does the overburdened startup developer have?

There is a better way

We decided to level the playing field and release a Community Edition of Crypteron's security platform...for free.

Just sign up for free, add a couple lines of code to your backend Java or C# app and enjoy your new super powers:

One-click response to data breaches
Strong Encryption
Tamper Protection
Secure Key Storage
Key Integration
Key Distribution
Key Caching
Key Revocations
No custom code required
Secures all data types (SQL, NoSQL, Objects, Files, Streams etc.)

By developers, for developers. Save months of writing risky code. Sign up for free

How does it work?

.NET Example Java Example

.NET Example

Add a [Secure] attribute to any properties of your class that you want to sign and encrypt:

public class Patient
{
    public int Id {get; set;}
    [Secure]
    public string FullName {get; set;}
    [Secure]
    public string SocialSecurityNumber {get; set;}
}

If you're using Microsoft Entity Framework or NHibernate then you're done! Crypteron will automatically sign and encrypt these properties using AES-GCM before your object is persisted to the database. It will then decrypt and verify that they weren't tampered with on the way back. It could not be any easier.

Not using Entity Framework or NHibernate? No problem! Just call Seal() on your object before sending it to the data store of your choice and call Unseal() when you fetch it back:

// Secure the object before persisting
myPatient.Seal();
// Decrypt and verify the object after
myPatient.Unseal();

What about files or file streams? No problem!

var cipherStor = new CipherStorExt();
// Files
cipherStor.EncryptLocalFile(clearFilePath, encryptedFilePath);
cipherStor.DecryptLocalFile(encryptedFilePath, clearFilePath);
// Streams
cipherStor.EncryptStream(clearInputStream, encryptedOutputStream);
cipherStor.DecryptStream(encryptedOutputStream, clearInputStream);

Java Example

Add a @Secure annotation to any properties of your class that you want to sign and encrypt:

public class Patient
{
    @Id
    @Column(name="Id") 
    private int Id

    @Secure
    @Column(name="FullName") 
    private String FullName;

    @Secure
    @Column(name="SocialSecurityNumber") 
    private String SocialSecurityNumber;
}

If you're using Java Persistence API (JPA) with Hibernate then you're done! Crypteron will automatically sign and encrypt these properties using AES-GCM before your object is persisted to the database. It will then decrypt and verify that they weren't tampered with on the way back. It could not be easier!

Not using Hibernate? No problem! Just pass your object to the seal() method before sending it to the data store of your choice and pass it to unseal() when you fetch it back:

// Secure the object before persisting 
CipherObject.seal(myPatient);
// Decrypt and verify the object after
CipherObject.unseal(myPatient);

What about files or file streams? No problem!

CipherStor cipherStor = new CipherStor();
// Files
cipherStor.encryptLocalFile(clearFile, encryptedFile);
cipherStor.decryptLocalFile(encryptedFile, clearFile);
// Streams
cipherStor.encryptStream(clearInputStream, encryptedOutputStream);
cipherStor.decryptStream(encryptedStream, clearOutputStream);

What about the encryption keys?

Good question! Proper key management is one of the most complicated part of strong data security and Crypteron takes care of this transparently so you can spend that extra time adding features to your application.

Encryption keys are encrypted with both AES256 and 521-bit elliptic curve cryptography
Encrypted keys are stored remotely, separate from your application or your databases
The SDK authenticates the key management service using strong cryptography
Keys are securely delivered to the SDK through multi-layered encryption
Keys are intelligently cached to maximize performance

Manage your apps and keys from one dashboard

Your apps, keys and account can all be configured from a Management Dashboard. Easily create new applications as needed, each with its own encryption keys. Upgrade to one of our premium plans with a single click.

Did we mention that all of this is FREE? What are you waiting for? Sign up today!

Respond to a data breach with a single click

Every application secured with Crypteron has a Pause button that you can access from within the Crypteron Dashboard. If you think that your application or database has been compromised in anyway, simply click the Pause button and the entire security pipeline will stop, including all decryption and encryption operations, allowing you to get a handle on the situation. You can even Pause your app using our REST API, providing the ability to integrate this with any automated detection mechanisms you already have.

dashboard-pause

How can you make a difference?

The community is only as strong as its weakest member. Securing your apps with Crypteron won’t stop hackers from stealing data from the dozens of other insecure apps we use every day. So don't just add Crypteron to your apps; bring it up at the next work meeting; present it at your local developer meetup; and let us know about any ideas you have for getting the word out there. With the free Community Edition, people have no reason to ignore data security and put themselves and their customers at risk.