Cyphers Architecture
Server Authenticated TLS (HTTPS): TLS 1.3, Authenticated Encryption with Associated Data (AEAD) ciphers, strict certificate validation. mTLS for access control. The same foundation powers every Cyphers product.
Defence in depth. Multiple security layers. Each layer independent. The same foundation powers every product we ship.
Developed from years of building security systems that pass government evaluations. Now available in everything we build.
Assume breach.
Every layer is built to hold alone. We design as if attackers are already inside the outer perimeter.
Trust nothing.
No connection is trusted by default. Identity verified. Certificates validated. Permissions checked.
Govern everything.
No configuration drift. No certificate surprises. No invisible traffic.
Foundational Components
Cyphers Cert Manager
Manages certificates.
Certificates are the foundation of transport security. Expired certs cause outages. Misconfigured mTLS causes breaches. Cert Manager handles the lifecycle.
Cyphers Auth Server
Issues tokens.
Identity is the first question: who is this? Auth Server answers with cryptographic proof. Scopes answer the second question: what can they do?
Cyphers Input Sanitizer
Sanitizes inputs.
94.4% of LLM agents are vulnerable to prompt injection. Input Sanitizer catches attacks at the gate. Your code sees only validated, safe data.
Cyphers Rate Limiter
Limits rates.
AI agents drain budgets fast. A compromised agent makes thousands of calls before anyone notices. Rate Limiter caps the damage.
Cyphers Security Monitor
Monitors security.
You can't govern what you can't see. Security Monitor provides visibility. Configuration drift triggers alerts in minutes, not months.
Cyphers Hub
Orchestrates fleet.
One dashboard. Complete control. Cyphers Hub is how you manage security at scale.
Same components. Different deployments.
See how our foundation adapts to each product—from AI agent infrastructure to workflow automation to developer tools.
| Capability | TLSMCP | Cyphers HTTPS Node | Cyphers HTTPS for Claude |
|---|---|---|---|
| Server Authenticated TLS (HTTPS) | TLS 1.3, Authenticated Encryption with Associated Data (AEAD) only | TLS 1.3, Authenticated Encryption with Associated Data (AEAD) only | TLS 1.3, Authenticated Encryption with Associated Data (AEAD) only |
| mTLS Support | Full mTLS access control | Client certificate auth | Client certificate auth |
| Certificates | Hub-managed, auto-rotation | Pinning, revocation, custom CAs | Pinning, revocation, custom CAs |
| Deployment | Drop-in proxy | n8n community node | MCP server for Claude |
| Observability | Hub dashboard, SIEM export | SIEM export (JSON, CEF) | SIEM export (JSON, CEF) |
| Compliance | FIPS 140-3 (Pro) | FIPS 140-3 (Pro) | FIPS 140-3 (Pro) |