- Tokens signed with hybrid ML-DSA-65 and ECDSA by default
- Per-app roles, assignment and sign-in strength with step-up
- Dynamic groups that can never grant privileged access
The suite
One suite. Twenty-two products. No Microsoft required.
Each product replaces a Microsoft or Google service and signs in through Prismara Identity. Take the whole suite or start with one — every one has its own site, pricing and a free trial where it offers a personal plan.
Identity & communication
3 products
- Every stored item sealed to a key made in the user's browser
- Spam, phishing and link protection before sealing
- Migration from Exchange Online and IMAP built in
PrismaraTalk
- Post-quantum end-to-end encryption on every device
- Server holds only ciphertext and cannot forge messages
- Single sign-on with Prismara Identity, web and desktop
Productivity
6 productsPrismaraWork
- Folio, Lattice, Lumen and Geode in one suite
- Opens and saves .docx, .xlsx, .pptx and OpenDocument
- End-to-end encrypted co-editing with post-quantum keys
PrismaraGeode
- Personal storage with folders and version history
- Sharing links whose keys never reach the server
- Opens files straight into Folio, Lattice and Lumen
PrismaraFolio
- Real-time co-editing, comments and suggestions
- Tables, images, footnotes and table of contents
- Opens and saves .docx and .odt
PrismaraLattice
- Dynamic arrays and spills, compatible with Excel
- Stays fast in workbooks with 100,000 formulas
- Threaded cell comments with roles
PrismaraLumen
- Build animations and presenter view
- Opens and saves .pptx and .odp
- Print notes pages and handouts
PrismaraSpaces
- Shared storage for teams, departments and projects
- Documents open in Prismara Work and sync to desktops
- Same post-quantum protection as the rest of the suite
Security
7 products
- Spray, impossible travel and BEC chains caught by correlation
- Identities pseudonymised on arrival; only you can re-identify
- Hunting queries across a million events in under a second
- Kernel-level sensor that blocks execution and resists tampering
- One XDR hub for alerts and incidents, synced with Prismara SOC
- No isolation or quarantine without an operator's passkey
- Default deny on every flow, on the device and at the gateway
- Short-lived signed access over post-quantum tunnels
- Leavers and unlicensed users lose access automatically
- Classification and DLP enforced where data lives, never in the hub
- eDiscovery, retention, insider risk and privacy requests in one place
- No destructive step without two of three custodians
PrismaraCrucible
- Signed scope enforced on every test action
- Non-destructive validation, passive only around OT and ICS
- Findings ranked by known exploitation, then EPSS and CVSS
PrismaraBrowser
- Google services and background connections removed
- Detects and reports any attempt to weaken its policy
- Blocks dangerous download types such as ISO, VHD and macro-enabled Office files
PrismaraPrism
- Zero-knowledge vaults: SovSec holds nothing that can decrypt them
- Secret Key sealed to the TPM, so a copied disk is useless
- Hybrid ML-KEM-768 and ML-DSA-65 on every key exchange
Management & operations
4 productsPrismaraAdmin
- Group-based licensing with signed entitlements every app verifies
- Customers invite partners, with capped roles and an end date
- Custom roles; privileged changes need a second admin
- Six platforms from one console, including native Windows MDM
- Devices refuse any change that wasn't signed and approved
- BitLocker keys revealed only with a second admin's passkey
PrismaraReach
- Agents run only actions signed by an operator's security key
- Signed patch policies and software deployment via native package managers
- Remote sessions end-to-end encrypted with post-quantum keys
- Incidents, problems, changes, requests and knowledge in one place
- Email intake with forged senders held back
- Attachments type-checked and malware-scanned before download
Business
3 products
- Website enquiries become leads automatically, never dropped
- Lead scoring, reminders and pipeline reports
- Hosted in Europe behind post-quantum TLS
- Austrian employment law workflows built in
- Time tracking with approvals and violation reports
- Sensitive fields encrypted with per-tenant keys
PrismaraERP
- Quote, deliver and invoice in one system
- Live project margin from time, expenses and purchases
- Gapless invoice numbering and a hash-chained audit trail
Infrastructure
3 productsPrismaraCloud
- VMs, Kubernetes, networking, storage and databases in Austria
- Infrastructure as code with OpenTofu and Terraform
- Policy guardrails checked before anything is deployed
PrismaraOS
- Disk encrypted and sealed to the TPM, no unlock prompt
- Immutable system image that rolls back a bad update
- Graphical installer and setup in 11 languages
- Telemetry pseudonymised before it leaves your network
- Personal identifiers never cross your perimeter in the clear
- Designed for Prismara SOC
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.