Project Cipher
This product discovers certificates and PKI infrastructure across an organization's environment, builds a live inventory, and flags risks such as impending expiry, weak algorithms and orphaned certificate authorities.
Product status
- Concept
- Prototype
- MVP
- Pilot
- Beta
- Production
- Scale
Problem
Certificate outages and weak or misconfigured infrastructure remain a recurring and preventable source of production incidents.
Why this problem matters
This is foundational security infrastructure; a single missed renewal or weak configuration can cause outages or create exploitable trust gaps.
Solution
Continuously discovers certificates, maintains a live inventory with ownership and expiry tracking, and flags weak configurations for remediation.
Core capabilities
- Certificate discovery and inventory
- Expiry alerting
- Weak-configuration detection
Architecture
Discovery scanning feeds a live inventory service that tracks ownership, expiry and configuration, backed by a risk-flagging layer.
How it works
- 1Discover certificates across your environment.
- 2Build a live, owned inventory with expiry tracking.
- 3Flag weak configurations and orphaned certificate authorities.
- 4Alert owners ahead of expiry and on newly discovered risk.
Security model
- • Read-only certificate metadata scanning; no private key access
Not yet independently assessed
Integrations
- • Planned: major cloud certificate managers and internal CA platforms
Deployment models
Target customers
- • Platform and infrastructure teams
- • Security architecture teams
- • Enterprises with large internal PKI estates
Business model
To be determined.
Differentiators
- • Combines discovery with ownership tracking so alerts reach the right owner, not a generic mailbox.
Evidence
Architecture & documentation
Concept brief
ConfidentialTraction
Stage
Concept
Roadmap
now
Discovery engine
Certificate discovery across common network and cloud surfaces.
next
Risk scoring
Weak-configuration and expiry risk scoring with ownership routing.
later
Automated renewal workflows
Optional integration with renewal automation.
Team capability
Investor relevance
Targets a narrow but persistent and costly operational risk category (certificate lifecycle failures).