Certes Networks

About Certes Networks

Certes Networks, established in 2000 and headquartered in Pittsburgh, PA, operates as a specialized developer of data protection and risk mitigation (DPRM) solutions. The firm was formerly known as CipherOptics, Inc., changing its name in January 2011 to Certes Networks and later rebranding to simply "Certes" in 2024 to reflect a strategic shift from network-centric security to a data-first approach. The company has secured a total of $23.8M in funding. It serves a global client base across various sectors, including financial services, healthcare, government, and utilities, with deployments in nearly 100 countries.

The business model centers on providing advanced encryption, policy management, and key management solutions that protect data in motion across any network—be it LAN, WAN, cloud, or virtual environments. Certes targets organizations that require stringent security and regulatory compliance, such as those adhering to FIPS, Common Criteria, CJIS, and GDPR standards. Revenue is generated through the sale of its hardware and virtual appliances, as well as its centralized management software, often through a partner-led model involving technology alliances, system integrators, and managed service providers (MSPs).

Certes' core product suite revolves around its CryptoFlow solutions, which provide application segmentation and data protection through a patented Layer 4 encryption method. This approach allows data packets to be secured without altering their network headers, ensuring transparency and interoperability with existing network infrastructure and rules. The product line includes the Certes Enforcement Point (CEP) hardware appliances and the Virtual Certes Enforcement Point (vCEP), which are managed by the CryptoFlow Net Creator (CFNC) software. The CFNC platform offers a centralized, user-friendly interface for defining security policies, automating key rotation, and creating crypto-segments to isolate data flows. This capability enables organizations to adopt a Zero Trust security posture by removing implicit trust from the network and enforcing role-based access to applications, thereby mitigating risks like lateral movement by attackers. The technology holds FIPS 140-2 and Common Criteria EAL4+ certifications.

The leadership team includes CEO Paul German, who joined in 2015. His background includes founding a VoIP security company and holding technology executive roles at financial services firms like Lehman Brothers and BNP Paribas, which provided him with deep insights into enterprise security needs. This experience shapes the company's focus on creating business-centric security solutions that offer quantifiable risk mitigation without disrupting performance.