Cigent protects data on devices operating at the edge from unauthorized access. Cigent solutions secures data at rest with layered protection including hardware encryption, pre-boot authentication, and multifactor authentication. Cigent also ensures data integrity when the device is in use preventing wiping and cloning and other data attacks.

Protect Data Against Emerging Quantum Threat

Q: How does Cigent work?

To prevent sophisticated adversaries from unauthorized access requires layered protection. The foundation of Cigent solution is 256-AES full drive hardware encryption with pre-boot and multifactor authentication. These capabilities have been validated by agencies including NSA and NIAP. Additionally, Cigent provides capabilities that ensure the integrity of data through its lifecycle including hidden partitions, storage-embedded AI, and verified data erasure.

Q: What is data-at-rest encryption?

Data at rest encryption traditionally refers to the encryption of data when the device is asleep or powered-off. Data at rest encryption seeks to prevent adversaries who gain physical access to the device would seek to extract sensitive data. Cigent uses AES 256 full drive hardware encryption with pre-boot and multifactor authentication. In addition, Cigent uses zero-trust access to control to also protect data when a device is in use. This is with hidden partitions that maintain encryption until it is accessed with step-up authentication.

Q: What is pre-boot authentication?

Pre-boot authentication (PBA), also known as power-on authentication, is a security feature that requires users to authenticate before their device boots up. PBA is a layered approach that protects devices and data from offline attacks and cyberattacks. It’s often used with full disk encryption (FDE), where users must authenticate to boot the system and restore data. Cigent PBA has been tested and validated by leading organizations including NSA, DISA, NIST, and NIAP.

Q: What devices does Cigent protect with hard drive encryption?

Cigent provides the widest breadth of secure storage solutions all utilizing hardware encryption. These includes: PCs supporting both M.2 2280 and the emerging M.2 2230 standard, remote servers and NAS devices with U.2 drives, external media with flash drives, encrypted external drives, SD and Micro SD cards, and embedded for SSD BGA.

Q: Does Cigent help with certifications?

Yes, Cigent Secure Storage Solutions can support organizations meeting Commercial Solutions for Classified (CSfC) for data at rest including pre-boot authentication requirements. Cigent solutions can also meet FIPS 140-2 and 140-3 standards. Additionally, Cigent can address requirements from Executive Order 14028 including encryption of data at rest, multi-factor authentication, and the utilization of zero-trust access control. Cigent protections have been thoroughly tested and validated by leading Federal agencies including MITRE, NIST, NSA, NIAP, the Air Force, Cyber Resilience of Weapon Systems (CROWS), and NSSIF (UK).

Adversaries do not need quantum computing today to create future risk. Encrypted mission data collected now could be retained until advances in computing threaten some of today’s widely used cryptographic protections. Cigent strengthens data-at-rest protection against today’s threats while helping defense and national security programs prepare for evolving cryptographic requirements.

Schedule a Demo

The Threat Starts Today

Data Collected Today Could Become a Threat Tomorrow

Classified information, mission plans, intelligence, platform data, credentials, technical designs, and AI models can expose operations, capabilities, sources, and future missions. If an adversary captures encrypted information today, that information can be retained and targeted as cryptographic capabilities advance.

This risk is commonly described as harvest now, decrypt later. Preparing for it requires more than waiting for a quantum computer or replacing one algorithm. Programs need to understand what data must remain protected, how long it retains value, where it is stored, what protects it today, and how those protections can evolve over time.

Learn About Full-Stack DAR Protection

TODAY'S DATA. TOMORROW'S INTELLIGENCE.

Encrypted data captured today can become exploitable as cryptographic capabilities advance.

TODAY

Mission Data Is Created

↓

THE RISK

Encrypted Data Is Collected

↓

OVER TIME

Cryptographic Capabilities Advance

↓

THE RESULT

Protected Data Becomes Actionable Intelligence

Bottom line: Protect today. Minimize persistence. Prepare to adapt.

Protect Sensitive Data

Prioritize mission systems that carry information that could expose operations, capabilities, sources, or future missions if recovered by an adversary.

Strengthen Protection Today

Apply layered encryption and authentication to reduce current exposure while broader post-quantum transitions continue.

Minimize Unnecessary Persistence

Securely sanitize information that no longer needs to remain on a device, eliminating avoidable exposure across the system lifecycle.

Modernize Without Disruption

Improve protection across fielded systems and future procurements without requiring every platform to transition at the same time.

Understand the Quantum Transition

Preparing Data Protection for a Changing Cryptographic Landscape

The risk begins before quantum capability arrives. An adversary does not need a cryptographically relevant quantum computer today to create future risk. Encrypted information can be collected now and retained for later analysis or decryption.

For mission owners, the priority is information that could still expose operations, capabilities, sources, or national security interests if recovered in the future. NIST advises organizations to begin migration now because products, services, and protocols will require updates, and vulnerable cryptographic dependencies must first be identified.

Protect the Data Now

Future Threats Do Not Replace Today’s Risks

Mission data remains exposed now to lost or captured systems, credential compromise, offline access, forensic recovery, and other conventional threats. Waiting for every future standard and product to mature leaves current information vulnerable to attacks that already exist.

Cigent combines secure SSDs, Pre-Boot Authentication, and Software Full Drive Encryption to provide layered protection before and after the operating system loads. The hardware and software encryption layers use AES-256 and operate as independent cryptographic boundaries. AES-256 remains part of NSA’s CNSA 2.0 suite for symmetric information protection.

Prepare to Adapt

Operational Control Makes Transition Possible

The transition to post-quantum security will occur over years, across changing standards, certifications, software, hardware, and operational requirements. Systems that cannot be updated or replaced easily can turn cryptographic migration into a much larger program challenge.

Cigent’s centralized administration console is deployed on premises to manage and enforce Data-at-Rest protections from initial deployment through ongoing lifecycle operations. Consistent policy, update, monitoring, and remediation workflows give programs the operational control needed to phase changes across a fleet without treating every platform as a single cutover.

Eliminate What an Adversary Can Recover

Do Not Leave Unnecessary Intelligence Behind

When information no longer needs to remain on a device, retaining it creates avoidable exposure. Systems that are redeployed, transferred, repurposed, or retired should not continue carrying recoverable data beyond the operational need.

Cigent provides cryptographic erase, block-level erasure, and verification capabilities designed to confirm that data has been successfully sanitized when systems are redeployed, transferred, repurposed, or retired.

Learn More

The Latest from Cigent

View All

Marine Corps Data at Rest Protection for Classified Data

Blog

September 17, 2026

Frequently Asked Questions

What does Cigent do?

How does Cigent work?

What is data-at-rest encryption?

What is pre-boot authentication?

What devices does Cigent protect with hard drive encryption?

Does Cigent help with certifications?

Still have Questions?

Learn how to secure mission-critical and classified data across the battlespace.

Download eBook

Cigent’s Federal Data Protection Solutions are second to none

Learn more about how Cigent can help you achieve your mission and protect data at rest and data on the edge from all forms of attack.

Schedule a Demo

Encrypted Storage Solutions

Software Protection

Resource Types

Webinars & Events

Recent Posts

Categories