Application-Level Encryption

As sophisticated threats emerge, and the risk of data exposure grows, data encryption becomes even more critical at every layer—an essential last line of defense when other security mechanisms fail.

With application security solutions from SafeNet, organizations can encrypt data at the earliest stages of the information lifecycle – at the application layer – to minimize risk and strengthen the security of sensitive assets. Leveraging proven encryption algorithms and granular, policy-based controls, data is secured transparently, without affecting application performance or the user experience.

SafeNet application security solutions enable organizations to encrypt sensitive data held in a range of on-premise and virtualized business applications, including customer relationship management (CRM), enterprise resource planning (ERP), and human capital management (HCM).

In addition, SafeNet offers SafeMonk, an encryption service designed specifically for Dropbox. With this solution, IT teams leverage robust encryption and establish effective controls—without compromising any of the convenience and usability employees have come to expect from Dropbox.


Our Application Security Products:

ProtectApp – Application Encryption

Through the support of standard Application Programming Interfaces, SafeNet ProtectApp offers the highest level of application protection and application security available in a commercial encryption solution for business applications.

Offering application protection and security at the highest level, SafeNet ProtectApp is an application encryption solution deployed in combination with SafeNet KeySecure that supports a broad range of the industry’s most widely used Web Application Servers and Enterprise Applications.

Through the support of standard Application Programming Interfaces, ProtectApp makes the inclusion of encryption and decryption services for application data simple and straightforward.

With ProtectApp, encryption operations can be performed on the application server or offloaded to the KeySecure appliance for more efficient centralized operations.  ProtectApp supports the OASIS Key Management Interface Protocol (KMIP) enabling centralized lifecycle management of encryption keys.

ProtectApp Provides the Following Benefits:


  • Address compliance standards and regulations such as PCI DSS, HIPAA, EU Directive and State Data Breach Laws.
  • Centralize administration of application encryption policy and keys using SafeNet KeySecure as well as encrypt multiple layers data via other SafeNet encryption products.
  • Separate duties of privileged administrators from access to sensitive data.
  • Speed application deployments with robust API support, sample application integrations and support for standard protocols.
  • Improve performance by offloading encryption processing to the SafeNet KeySecure appliances.

ProtectApp Highlighted Benefits:

  • Protect customized applications without having to spend time and money with software development.
  • Collaborate with business partners and integrate new vendors into the digital supply chain knowing that only authorized, authenticated users can view sensitive data.
  • Encrypt information transparently, without disrupting business operations, application performance, or the end-user experience.
Application Protection Specifications
Supported Web Application Servers Apache Tomcat, IBM WebSphere, JBoss, Microsoft IIS, Oracle WebLogic, SAP NetWeaver, Sun ONE
Application Programming Interfaces ICAPI/KMIP, JCE/KMIP, MSCAPI, .NET, PKCS#11
Encryption Algorithms 3DES, AES, DES, RC4, RSA (signatures and encryption), SHA-I, SHA-2
Supported Platforms for ICAPI Providers - Red Hat Enterprise Linux 5.4 and above Microsoft Windows 2003, 2008 R2, and 7 in both 32-bit and 64-bit.

ProtectApp Highlighted Features:

  • Address compliance standards and regulations such as PCI DSS, HIPAA, EU Directive, and State Data Breach Laws.
  • Centralize administration of application encryption policy and keys (in addition, encrypt multiple layers data via other SafeNet encryption products) using SafeNet KeySecure.
  • Separate duties of privileged administrators from access to sensitive data.
  • Speed application deployments with robust API support, sample application integrations, and support for standard protocols.
  • Improve performance by offloading encryption processing to the SafeNet KeySecure appliances.


ProtectApp Highlighted Benefits:

  • Protect customized applications without having to spend time and money with software development.
  • Collaborate with business partners and integrate new vendors into the digital supply chain knowing that only authorized, authenticated users can view sensitive data.
  • Encrypt information transparently, without disrupting business operations, application performance, or the end-user experience.


SafeMonk – Tapproof Dropbox Encryption

SafeMonk provides end-to-end Dropbox encryption with sharing, lightning fast sync, and Enterprise grade security in a tapproof service. Facilitate collaboration with the confidence that your Dropbox files will remain secure and controlled throughout their lifecycle.