Server General Agent

Data Encryption System for Your Server Workloads

SGA is a robust file and repository encryption software designed for server environments, providing secure file system-level encryption, access control and key management through a command-line interface. It also serves as the backend for Server General software, ensuring high security via our years-long expertise.

Data Encryption Engine

Server General Agent includes a high-performance Data Encryption Engine, which provides strong encryption for all writes, and decryption for all reads. The Data Encryption Engine protects against theft of media, data images – even if intruders are able to obtain physical or electronic copies of data. The stolen data would be unusable without the decryption key. Any probing of files would only yield blocks of ciphertext.

Key Management Engine

The Key Management Engine, a crucial component of the Server General Agent, enables customers to control their encryption keys at all times. Keys are stored in key lockers within the Server General global key management infrastructure, wrapped in another layer of encryption using a master key (a passphrase) known only to the data owner. This ensures only cipher blobs are stored, preventing others from deciphering them. The system allows customers to generate strong 128-bit keys, rotate them on demand, revoke any key at any time, and store them securely.

Access Control Engine

The Access Control Engine offers a robust identification and authentication mechanism, reducing the ‘trust domain’. Only authorized Server General Agent administrators can access administrative functions, mitigating the risk from rogue systems administrators and entities beyond perimeter security. Additionally, the Access Control Engine includes a crucial feature: ‘protecting from the protectors.’ Even ‘root’ users with access to sensitive data directories on the server cannot view personal information in “cleartext” format. Their privileged access only reveals blocks of ciphertext.

Logging Engine

The Logging Engine logs every administrative operation related to Server General Agent. The logs are stored at four different locations - on the server itself and within our cloud infrastructure. These log files play a crucial role when it comes to security and compliance. In case of a regular server, an external or a malicious internal user can easily gain unauthorized access to the logged information and remove self incriminating entries. However, this is not possible with Server General Agent, as logs are being stored at multiple locations that are not under a single administrative control.

Features

Robust Encryption

Transparent AES Encryption: Encrypts data at rest with the strongest possible 128-bit keys.

Requires no changes to existing applications: Encrypts application data at file system layer which is transparent to the applications on your server.

Access Control and Data Integrity

Role-Based Access Control (RBAC): Limits access to sensitive data based on user roles and permissions.

Digital Signatures: Maintains data integrity by cryptographically signing data upon storage and retrieval.

Non-Repudiation and Audit Logging

Secure Logging: Logs all SGA activity in four separate locations, preventing tampering even by administrators.

Non-Repudiation: Ensures actions can't be denied by logging them securely.

Additional Highlights

Protects against "root" users: Prevents privileged system users from accessing data by default.
High-performance Encryption Engine: Ensures fast and efficient encryption and decryption.
Unintrusive and Maintenance-Free: Requires minimal setup and runs silently in the background

Compliant Key Management

Secure Key Management: Provides secure distribution, rotation, and revocation of encryption keys stored in a global key management infrastructure;
Key Wrapping: Encryption keys are further encrypted with a master key (passphrase) known only to the customer.

How it Works

First and foremost SGA is a security service. It´s designed to help you to secure your data and achieve regulatory compliance. We can encrypt your sensitive information stored in many applications or a file server. The entire process usually takes less than 30 minutes.

Use Cases

Server General Agent (SGA) is highly versatile and compatible with a wide variety of applications and server use cases.

By specifying the directory and application service you wish to protect, SGA seamlessly manages the associated application's processes, ensuring continuous and transparent encryption. This flexibility makes SGA an ideal solution for securing diverse data environments without disrupting your workflows.

  • Decide what you want to protect: SGA is compatible with most of the servers and cases as long as there’s a static data path with files or data.
  • Configure SGA policies: configure what to encrypt, key algorithm, key length and data administrators.
  • Enable SGA service and enjoy seamless data encryption: after you’ve configured and enabled SGA, it will handle the behavior of applications so the encryption is transparent for them.

Pricing

Server General Agent (SGA) offers a straightforward and flexible pricing model based on the number of repositories or applications you need to protect. This approach ensures you only pay for the security you use, making it a scalable solution that grows with your business. As your needs change, you can easily upgrade or downgrade your subscription to match your current requirements, ensuring optimal cost-efficiency and adaptability.

Designed to suit organizations of all sizes, SGA's pricing model provides enterprise-strength security features at a competitive rate. With transparent AES encryption, robust key management, and comprehensive access control, SGA delivers unparalleled data protection without breaking the bank.

$ 199/mo
For each encrypted repository on your server
Get Started
What’s included:
Transparent AES Encryption
Role Based Access Control
Secure Key Management
Secure Remote Logging