Products

Four integrated platforms operating on a unified zero-knowledge architecture. Deploy on-premises or in our managed cloud. All products share the same encryption layer, the same monitoring tier, and the same compliance framework.

Zero-Knowledge Storage

CYFR Vault

Encrypted file storage where you hold the keys. Files are encrypted with AES-256-GCM in your browser before they leave your device. CYFR servers store only ciphertext — we have no technical ability to access your data, even under subpoena.

  • Client-side AES-256-GCM encryption — keys never touch our servers
  • Team folders with granular read/write/admin permissions
  • 30-day version history with point-in-time restore
  • Immutable ZFS snapshots for ransomware protection
  • Time-limited, password-protected sharing links
  • Desktop sync clients for Windows, macOS, and Linux
  • Web-based access with Web Crypto API — no software install required
  • Per-file unique encryption keys — compromise of one does not compromise others
$ vault-cli encrypt proposal.pdf
→ AES-256-GCM key generated
→ Encrypted: proposal.pdf.enc (1.2 MB)
 
$ vault-cli share proposal.pdf.enc
→ Share link created (expires 72h)
→ vault.cyfr.tech/s/a8f3c2d1
 
$ vault-cli status
→ Files: 1,247
→ Storage: 14.3 GB encrypted (8.1 GB compressed)
→ Keys: 0 on server
→ Last sync: 2 minutes ago
Encrypted Video Platform

VaultStream

Upload, transcode, and deliver encrypted video to authorized viewers. Training videos, compliance recordings, executive communications — any video content, protected with per-session encryption keys and delivered through a white-label player you control.

  • Hardware-accelerated transcoding — H.264, HEVC, AV1 with Intel QSV, NVIDIA NVENC, VAAPI, and ASIC/FPGA options for high-density deployments
  • Adaptive bitrate HLS — 240p to 4K, automatic quality adjustment per viewer
  • Per-session access URLs — every playback generates a unique cryptographically signed URL, revocable within 60 seconds globally
  • AES-128 segment encryption with per-content unique keys
  • White-label player — CSS theming, logo replacement, watermarking, custom color schemes
  • Native SDKs for Android, iOS, and web
  • Automated content ingestion — watch folders, S3/GCS monitors, RSS/Atom feed importers, FTP drop zones
  • Viewer analytics — completion rates, drop-off analysis, geographic access patterns
VaultStream Player
🔒 AES-128 | 1080p | HLS

Enterprise Training Platform
Upload your training library. VaultStream transcodes every video into an adaptive bitrate ladder. Employees access the content through your branded player, authenticated via your existing SSO. Every view is logged to the audit trail. No content is accessible without a valid session.

White-Label MSP
Resell VaultStream under your brand. Isolated customer silos with per-customer encryption keys. Integrated billing. Your clients see your logo, your colors, your domain — CYFR handles the infrastructure.

Custom Solutions

CYFR Build

Not every encrypted infrastructure need fits a product feature list. CYFR Build is our custom solutions practice — we build exactly what you need on our zero-knowledge architecture. Client portals, secure APIs, virtual data rooms, workflow automation. White-label ready for MSP partners.

  • Custom client portals with your branding and authentication
  • Secure REST and gRPC APIs built to your specification
  • Virtual data rooms for M&A, litigation, and due diligence
  • Workflow automation — approval chains, notifications, scheduled actions
  • Custom encryption policies — bring your own key management, HSM integration
  • Dedicated infrastructure — single-tenant deployment on bare metal in your choice of colocation facility

Virtual Data Room

Encrypted document repository for M&A due diligence. Granular access controls. Watermarking. Full audit trail of every document access. Self-destructing access after deal close.

Client Portal

Branded, authenticated portal for your clients to securely access documents, messages, and files. SAML/OIDC integration with your identity provider.

Secure API

Custom API endpoints backed by our encryption infrastructure. Your clients' data encrypted client-side before it touches your API. We build the endpoints, you own the integration.

Infrastructure Monitoring

CYFR Watch

The monitoring tier that sits across all CYFR products. It does not inspect content — it cannot, by design. Instead, it monitors metadata: access patterns, geographic distributions, velocity anomalies, credential usage, key rotation events, and system health. The reason a CYFR customer can prove, to an auditor or a court, exactly who accessed what and when — even though CYFR never saw the content.

  • Real-time anomaly detection — geographic access anomalies, credential sharing, velocity spikes
  • Immutable append-only audit logs — every access event recorded, tamper-evident
  • Configurable alerting — email, webhook, SIEM integration (Splunk, Sumo Logic, Datadog)
  • Weekly audit summaries — automated compliance reporting
  • System health dashboards — uptime, latency, storage, transcode queue depth
  • API access to all monitoring data — build your own dashboards and alerting rules
$ cyfr-watch alerts --today
0 critical · 0 warning · 2 info
 
08:14 UTC INFO
→ Access volume +12% vs 7-day avg
→ Source: vault-east-1
 
02:31 UTC INFO
→ Key rotation completed for acme-corp
→ 3,847 objects re-encrypted · 0 errors
 
$ cyfr-watch audit --user=jane --last=7d
→ 142 access events · 0 anomalies
→ 3 devices · 2 locations
→ Export: audit-2026-07-04.csv

Product Comparison

CYFR Vault VaultStream CYFR Build CYFR Watch
Zero-knowledge encryption
Client-side encryption
SSO / SAML / OIDC
White-label / MSP ready
REST API
On-premises deployment
Interactive demo Try → Try → Contact us Included