Products

Two products. One operating picture.

Cipher Posture finds and fixes vulnerable cryptography. Threat Model Agent models how an adversary would use it. Together they give you one current picture of what you run and what could break.

Explore Threat Model Agent Run the assessment

Product · Post-quantum

Cipher Posture

The post-quantum platform, from discovery to sustained operations.

Continuous discovery across cloud, data center, build pipelines, and OT. A versioned CBOM, HNDL exposure scoring, staged migration, and the evidence that keeps it current.

Explore Cipher Posture

What it does

Discovery & CBOM

Every algorithm, key, and certificate — including inherited dependencies and firmware.

Exposure prioritization

Sequence by data lifespan, obligation, and migration cost, not by asset visibility.

Migration & operations

Hybrid TLS, PQC issuance, quantum-safe signing, and continuous drift evidence.

Output

Versioned CBOM
Prioritized migration roadmap
Audit-ready cryptographic evidence

Product · Threat modeling

Threat Model Agent

From any description to a threat model you can act on.

An end-to-end threat modeling agent: ingests notes, repositories, diagrams, documents, SBOMs and CBOMs; builds a reviewable system model; runs the frameworks you choose and compliance presets; and returns evidence-checked threats with fixes and verification steps.

Explore the agent

What it does

Ingest anything

Text or speech, repositories, local files, documents, diagrams, OpenAPI, Terraform, SBOMs and CBOMs.

Model, then analyze

A reviewable system model, the frameworks you choose, compliance presets, local scanners and a post-quantum pass.

Verify and act

Quotes checked against the inputs; mitigations with Where and Verify; tracking, tickets and PR checks.

Output

Reviewable system model
Evidence-backed threat register
Mitigations with Where and Verify
Graph, exports and tracking

How they fit

Products do the continuous work. Services do the change.

A product that only reports is a subscription to a dashboard. The work of changing a certificate hierarchy, a signing pipeline, or an access model still needs people — and the products make that work cheaper and provable.

Products

Continuous discovery, modeling, and monitoring. They keep the inventory and the threat model current between engagements.

Services

PQC readiness, Zero Trust, PKI, IAM, and agentic identity. They make the changes the products identify, with your team.

Evidence

A versioned CBOM, a threat register, and audit packs. The artifacts that answer procurement and regulators.

Next step

See both products on one system.

A scoped pilot runs the platform and the agent against the same service group, so you can compare the inventory with the threat model it produces.

Explore the platform Run the 10-minute assessment