Ottawa company that builds cross-domain security hardware for defence, government and critical infrastructure, including unidirectional gateways, an adaptive gateway and optical data diodes, and develops the Verity governance, risk and compliance software.
Ottawa company that builds cross-domain security hardware for defence, government and critical infrastructure, including unidirectional gateways, an adaptive gateway and optical data diodes, and develops the Verity governance, risk and compliance software.
States its NGXS UGW-100 and UGW-200 unidirectional gateways are NSA Approved, NCDSMO Raise-the-Bar compliant and Common Criteria certified EAL 4+. sphyrnasecurity.com ↗
Announced in 2025 that its NGXS UGW-200 was added to its existing Government of Canada standing offer (E60QH-22-0602/001/QH). sphyrnasecurity.com ↗
States its Container Based Assured Pipeline (CBAP), used in the AGW-200, was jointly developed with the Communications Security Establishment (CSE). sphyrnasecurity.com ↗
States its management system is certified under ISO/IEC 27001:2022, with extended accreditation in ISO 27017:2015 and ISO 27018:2019. sphyrnasecurity.com ↗
Was part of a joint venture with Dolomite Networks and Rhea awarded a DND contract for Defence R&D Canada Ottawa (informatics professional services, 2016 to 2022). canadabuys.canada.ca ↗
Products Sphyrna Security publishes on its own site. Each card links to the page it was taken from.
NGXS UGW-200 Unidirectional Gateway
Unidirectional gateway
Unidirectional gateway manufactured in Canada, with 25 Gbps interfaces and data diode, hot-swappable redundant power supplies on the red and black sides, and dual USB interfaces for software updates.
Cross-domain transfer appliance on the UGW-200 hardware that pairs an EAL 4+ data diode with Apache NiFi/MiNiFi and CBAP to support a wider range of protocols and filters.
EAL 4+ optical-electrical-optical data diode in 10 Gbps (OEO-10) and 25 Gbps (OEO-25) versions that enforces one-way transfer through signal conversion, with proprietary power isolation.
GRC software with compliance management, plan-of-action tracking, a risk registry and dashboard, role-based access with MFA, audit logging and PDF/CSV export.