Baffle, Fortanix, General Dynamics Mission Systems and Virtru

About Fortanix

Fortanix sells the Fortanix Data and AI Security Platform, which protects data, AI models, keys and applications while they are in use, and is built on Confidential Computing. Fortanix describes the problem this way: data, AI models and applications must be decrypted in memory to run, which leaves sensitive information and proprietary IP open to admins, operators and compromised hosts. Fortanix says it pioneered Confidential Computing in 2016.^[3]

Fortanix says its unified platform covers protecting data and AI in use and preparing for quantum threats. Fortanix says it brings Key Management, Confidential AI and Post-Quantum Readiness together in one platform. Fortanix describes Confidential Computing as running data and applications in secure enclaves that isolate the data and code to prevent unauthorized access, even when the compute infrastructure is compromised. Fortanix says customers can keep data and keys under their own jurisdiction in any cloud and hold their own keys.^[1][3]

Fortanix Runtime Encryption uses Intel SGX to enable general purpose computation on encrypted data without ever exposing plaintext application code or data. Fortanix says Runtime Encryption includes an EnclaveOS that transparently protects applications without requiring modifications. Fortanix lists databases, web servers, build servers, directory servers and key management among the applications available protected out of the box. Fortanix Runtime Encryption protects containerized applications during runtime from host-level attacks. Fortanix Runtime Encryption provides a security framework to ensure that sensitive data remains protected even when in use. Fortanix says Runtime Encryption allows organizations with sensitive workloads to operate in untrusted environments such as the public cloud and remote clouds.^[4]

On key management, Fortanix says encryption keys can be stored in a natively integrated FIPS 140-2 level 3 certified HSM, available on-premises or SaaS. Fortanix says DSM SaaS provides secure key management and cryptography service across public, private, hybrid or multicloud environments. Fortanix says it can encrypt data across databases, virtual machines, filesystems, and multi-cloud. Fortanix offers data tokenization, which replaces sensitive data to prevent data exposure. Fortanix proposes Key Insight as a key management and inventory tool that provides visibility and simplifies security controls across multicloud and on-premises environments.^[5][6]

Fortanix addresses quantum risk by helping customers find vulnerable cryptography, prioritize the risk, and migrate to NIST post-quantum algorithms with crypto agility built in. Fortanix says this is meant to stay ahead of harvest-now, decrypt-later attacks that target the data and AI customers protect today. Fortanix describes an approach to HSM modernization that removes legacy HSMs from service as they reach the end of their useful life.^[3][7]

Fortanix says customers can deploy as SaaS, on-premises, or air-gapped. Fortanix says its platform helps customers meet GDPR, HIPAA, PCI DSS and DORA, with FIPS-validated key protection, centralized audit trails, and cryptographic attestation. Fortanix says its unified platform enables financial organizations and their ICT providers to identify at-risk services, prioritize remediation efforts, and safeguard sensitive data across all layers and systems. Fortanix says that, as data flows between different clouds and datacenters, it is critical to apply zero trust security at the data layer by using encryption. Fortanix describes how to implement the data pillar recommendations of the Zero Trust Maturity Model from the US Cybersecurity and Infrastructure Security Agency (CISA).^[3][5][8]

A healthcare example Fortanix describes is BeeKeeperAI, which was created at the University of California, San Francisco (UCSF), Center for Digital Health Innovation (CDHI), and accelerates the development and deployment of artificial intelligence (AI) algorithms in healthcare. Fortanix says its Confidential Computing technology, combined with data at rest protection, lets healthcare organizations protect e-PHI and the intellectual property in AI algorithms, even on untrusted infrastructure. Fortanix says it makes it possible to enroll computing resources, in the cloud or on-premises, and deploy existing applications within a secure TEE in minutes.^{[1][3][5][9][10]}

About General Dynamics Mission Systems

General Dynamics Mission Systems engineers systems for combat vehicles, ships, submarines, aircraft, spacecraft and other advanced defense systems. MEDUSA is a submarine-launched delivery system that uses an expendable unmanned underwater vehicle (UUV) to deploy payloads.^[2]

General Dynamics Mission Systems provides spacecraft systems and subsystems engineering, mission planning, ground systems engineering and management, communications and network services. General Dynamics Mission Systems engineers integrated, tested and delivered the ground system command and control segment known as the Mission Operations Element (MOE). Satellite operations centers of General Dynamics Mission Systems have connected the U.S. Navy fleet and military since 1991. General Dynamics Mission Systems will evolve the ground system architecture under the Ground, Management and Integration program to support development of Proliferated Warfighter Space Architecture mission capabilities. General Dynamics Mission Systems engineers space electronics, encryption products and ground systems.

QGroup integrates PitBull into its security solution offerings for international customers, including the German Bundeswehr. PitBull is available as the secure foundation for customized solutions through value-added reseller Codeweavers. The Software Development Kit included with PitBull purchase contains libraries, header files, maintenance pages and software developer manuals for writing PitBull-specific applications or modifying existing applications.^[4]

Keystone is an infrastructure of security capabilities rooted in Commercial-Off-The-Shelf (COTS) hardware. Keystone is currently pre-integrating its security capabilities on COTS SBCs from Abaco and Curtiss-Wright. Keystone has hardware configurations it supports and can be adopted to support custom hardware, from small SWAP tactical to enterprise-level use cases. Idaho Scientific is now part of General Dynamics Mission Systems and specializes in embedded security. The Helios Memory Guard and Helios Processing Systems are designed to defend against physical attacks on secure data through authentication and encryption. The Helios Memory Guard (HMG) is shimmed in between the processor and memory controller to provide just-in-time encryption, decryption, and authentication for all memory write and read requests. HMG decrypts and authenticates boot/load-time images encrypted by the Helios Packager before deployment, and the user maintains full ownership and management of the load-time keys. The Helios Processing System (HPS) integrates Helios Memory Guard (HMG) with a processor to provide a secure processor IP package.^[5][6]

The PhantomLink free space optical (FSO) system provides laser communications for the tactical environment. The PhantomLink system operates outside of regulated spectrum, which allows rapid deployment in support of military operations. The PhantomLink system is capable of at-the-quick-halt operations and is upgradeable to on-the-move operations. The MC2 Hub is a replacement for the fielded BFT-2 and integrates a modular, multi-transport design with anti-jam and beamforming capabilities. The MC2 Hub architecture supports future LEO constellations and alignment with FIPS 140-3 and NIST SP 800-53/800-171 security standards. General Dynamics is a certified Iridium Value Added Reseller and provides securable handsets to the U.S. government and its allies. General Dynamics provides fixed satellite air time and can assist in provisioning end to end satellite solutions. General Dynamics provides Iridium handsets with accessories and airtime service plans.^[7][8][9]

For more than 70 years, General Dynamics has designed and manufactured custom precision metal optical components for defense, space and airborne applications. General Dynamics provides end-to-end design, fabrication and testing of beryllium and aluminum optics, from scan mirrors to plano and aspheric mirrors to complex telescope assemblies. The General Dynamics team in Cullman, Alabama has built 21 primary mirror segments, two secondary mirrors, 21 delta frames, 10 various aft optical components and beryllium panels for the James Webb Space Telescope since 1998. General Dynamics provides close tolerance machining and processing of beryllium and its alloys for optics and optical assemblies. General Dynamics produces lightweight composite structural components and integrated assemblies for a wide variety of aircraft applications. General Dynamics aircraft composite products include wing and fuselage structures, flight control surfaces, doors, engine structures and pressure vessels. General Dynamics provides highly complex systems integration for land, airborne and maritime platforms.^{[2][4][9][11]}

About Virtru

Virtru sells data security software that protects sensitive data shared through email, files, SaaS apps and mission partner environments. Virtru says its solutions integrate with existing workflows to enable granular policy and access control on data shared with others.^[1]

Virtru says the platform lets customers collaborate with internal and external teams while keeping full control and data sovereignty. Virtru also says attribute-based access controls (ABAC) allow granular decisions about who can access data, and when.

For email, Virtru says its email encryption integrates with Google Workspace and Microsoft Outlook. Virtru for Outlook lets users encrypt emails shared internally and externally from within Outlook. Virtru for Gmail offers an optional email blocking feature. When a user attempts to send an email or attachment that violates a blocking DLP rule, the email is blocked and the user receives a pop-up notification.^[1][6][7]

For files, Virtru Secure Share lets organizations set the maximum number of files in a single message, restrict individual file sizes and decide which file types are permitted for upload. Virtru Secure Share also lets teams send files and messages from group email addresses.^[11]

Virtru Collaborate is meant for ongoing external collaboration with partners, contractors and vendors, using secure workspaces. Virtru says Collaborate is built on Virtru's FedRAMP Moderate authorized, FIPS 140-2 validated architecture. External recipients verify their identity using their existing email address, and administrators manage permissions from the Control Center dashboard. Virtru says Collaborate works alongside Google Drive, Microsoft OneDrive and SharePoint.^[10][12]

Virtru Data Protection Gateway can be used with Looker. Virtru says security rules automatically identify and encrypt sensitive information flowing in and out of Looker. Virtru also describes protecting data flowing through SaaS apps such as Zendesk or Salesforce.^[1][13]

For deployment, Virtru says the platform can be hosted in a self-managed, fully air-gapped, or VPC environment, and that a fully managed commercial cloud option is also supported.

Virtru says 6,100 customers use it for data security. It lists compliance areas including CJIS, CMMC, CUI, FERPA, GDPR, GLBA, HIPAA, ISO 27001 and ITAR. Virtru also says it undergoes regular independent third-party audits to validate and certify its compliance with FedRAMP, SOC2, and more.^{[1][6][8][9][10][12][13]}