Description

Protect files with on-the-fly encryption and decryption. Create transparent encryption policies that grant access only to trusted processes, all others see ciphertext.

Protect data at rest from unauthorized processes

Encrypt files so only trusted processes can read the plaintext. Anyone else, including malware, sees ciphertext.

Compliance-driven encryption policies

Apply encryption rules to specific directories to meet data-at-rest requirements, without changing how your app reads or writes files.

Encryption enforced by process, not by hand.

CBFS Encrypt uses a minifilter driver to catch file requests that match your encryption rules. Data gets encrypted on write and decrypted on read, automatically.

Access is controlled per process. Trusted processes see decrypted files. Everyone else, including a user browsing the folder, sees only ciphertext.

Encryption happens at the driver level, so nothing changes in the apps reading or writing the protected files.

Comprehensive Features for Maximum Performance

Secure Files and Enforce Access Restrictions

Implement on-the-fly file encryption, using modern cryptographic algorithms, for deeply-integrated data security. Leverage intelligent access rules to enforce targeted access restrictions via a modern minifilter driver.

Transparent File Encryption

Automatically encrypt files on disk and decrypt them on-the-fly, keeping sensitive data protected at all times. Flexible encryption rules make it easy to protect specific directories according to your needs.

Proactively Intercept and React to Requests

CBFS™ Encrypt's robust, rules-based encryption and decryption engine is flexible enough to handle use-cases of any scale and complexity. Target the file requests you care about, and let the encryption and decryption occur quietly in the background.

File Isolation

File isolation allows different processes to see different file contents when viewing the same file. For example, one process may see decrypted content, while another process would see only encrypted data.

Process-Based Access Control

Define which processes are permitted to access decrypted file contents. Authorized processes see data transparently decrypted according to your encryption rules, while all other processes interact only with the encrypted form of the file.

Simple Deployment

The simplified deployment scheme eliminates architecture detection and potential errors. A single CAB file contains all of the drivers and Helper DLLs that are necessary for driver installation.

Additional Information