Post-quantum cryptography is here — SecureAge is prepared.

Frequently Asked Questions

Simple answers for a safer world.

Quick solutions and detailed insights to help you get the most out of your protection.
Table of Contents

General

Products & packaging

  • SecureData: Automatic file-level protection
  • SecureEmail: Email protection in Outlook workflow
  • SecureFile: Protected file sharing with signing/encryption and restrictions
  • SecureAge Central: Central management and policy control
  • CatchPulse: Endpoint protection with allowlisting + cloud-based scanning

Yes. SecureAge offers a suite bundle that typically includes SecureData, SecureEmail, and SecureFile. Packaging can vary by deployment and required capabilities (e.g., usage restrictions / application controls).

Most endpoint products are licensed per device. SecureAge Central is available as SaaS (cloud) or on-premises (per-VM image).

Deployment & operations

 Yes. SecureAge supports both cloud and on-premises deployment models.

No, SecureAge products are designed to run in the background and minimise user workflow changes. Real-world performance depends on endpoint specifications and policy strictness, so most customers pilot first and tune policies.

Compliance & assurance

Yes. SecureAge Solutions are designed to help organisations meet global privacy and security standards. By enforcing strict data protection, access controls, and detailed activity logs, we make it easier for you to stay compliant with regulations like GDPR, HIPAA, and others. You can view our full compliance details here.

Yes, SecureAge Solutions reduce insider-risk by controlling access to protected data, enforcing policy, and providing audit trails

SecureAge provides professional services — customisations, deployment, trainings and technical support options for our customers.

SecureData

Overview

SecureData automatically protects files based on policy so sensitive data remains protected even when files are created, modified, copied, or moved.

SecureData eliminates the risk of data leakage at the source. By keeping protection persistent, your files remain encrypted and secure even when moved to downloads, USB drives, shared folders, or backup locations.

How it works

Yes. Protection follows the file so data remains unreadable without authorisation.

No. SecureData is designed for automatic protection based on policy, with manual options available when needed.

SecureData applies PKI-based protection so only authorised identities can access protected files.

With Application Binding function in SecureData, it can restrict protected files to only open in approved applications, reducing leakage via untrusted apps.

Deployment & management

Admins define policies such as file filters/rules (e.g., file types/locations) to control what is automatically protected.

Typically through central policy/config distribution (often managed via SecureAge Central).

Licensing & procurement

Per device.

Supported OS is listed at the top of the SecureData product page.

SecureEmail

Overview

SecureEmail protects emails and attachments through an Outlook-based workflow that supports classification, encryption, signing, and usage controls.

How it works

SecureEmail supports sending protected emails to external recipients with no software installation required by the recipient.

No. By using the SecurePDF feature within SecureEmail, you can send encrypted messages and attachments that recipients open using a simple OTP or password.

Emails are protected so only intended recipients can access the content, reducing exposure from interception or accidental forwarding.

Protection remains enforced; unauthorised recipients won’t be able to access protected content. Forwarding can also be restricted by policy.

Comparisons

PGP commonly uses a decentralised “web-of-trust” model and often requires more user involvement for trust decisions and setup. PKI-based approaches use certificate authorities and central trust policies, reducing end-user decision burden.

Licensing & procurement

Per Device.

Supported OS is listed at the top of the SecureEmail product page.

SecureFile

Overview

SecureFile enables protected file sharing using signing, encryption, and optional usage restrictions so only authorised recipients can access content.

No. By using the SecurePDF feature within SecureFile, you can send encrypted documents that recipients open using a simple password.

Signing & encryption

Signing proves authenticity and integrity. Encryption prevents unauthorised reading of the content.

Yes—the digital signing in SecureFile supports workflows where multiple signers are required.

Usage restrictions (DRM)

Depending on policy:SecureFile can restrict copy, print, screen capture, forwarding/sharing behaviour, and set expiry.

The protected file will be deleted when triggered after expiry date.

File formats

SecureFile can generate protected formats that indicate the applied protection type (e.g., signed, signed+encrypted, DRM protected).

Use SecureData for always-on protection during daily work. Use SecureFile for controlled sharing outside your organisation.

Licensing & procurement

Per device.

Supported OS is listed at the top of the SecureFile product page.

CatchPulse

Overview

CatchPulse protects endpoints by blocking untrusted processes by default (allowlisting approach) and validating files using cloud-based scanning.

Most antivirus programs attempt to keep up with a never-ending “Most Wanted” list of bad files. CatchPulse flips this by using a “Guest List” (Allowlisting) that only lets trusted, safe programs run. By blocking everything else by default, it stops brand-new threats that other tools might miss, while using Cloud AV to constantly verify that your approved files stay secure.

EDR focuses on detection, monitoring, and response after suspicious behaviour occurs. CatchPulse focuses on prevention before execution.

Allowlisting operations

The baseline allowlist is built automatically during initial deployment. Ongoing effort depends on how strict your policy is and how frequently your environment introduces new software.

The user can request approval; the admin can approve or reject the request.

Yes—policies in CatchPulse can control removable device behaviour (read/write controls and device allow/block rules).

Yes. Some attacks are file-less, allowing them to bypass traditional anti-malware and threaten system security. CatchPulse addresses this by letting users create custom rules that extend allowlisting coverage to these fileless threats—even those that exploit trusted applications to infect a PC.

Licensing & procurement

Per device.

Hardware requirements

  • 2 GHz Pentium 4 or higher processor
  • 1GB of RAM or as recommended by the Windows OS whichever is higher
  • 300 MB hard disk free space or more
  • Local hard disk that is formatted with NTFS file system
  • Minimum screen resolution: 1024Ă—768 (At 100% Scale)


Version

Cilck here to see our full history

Supporting operating systems

  • Windows 11 (64-bit) 
  • Windows 10 (32-bit and 64-bit) 
  • Windows Server 2025 (64-bit)
  • Windows Server 2022 (64-bit) 
  • Windows Server 2019 (64-bit) 
  • Windows Server 2016 (64-bit)

SecureAge Central

Overview

SecureAge Central is the management layer used by administrators to manage policies, users, endpoints, certificates/keys, and operational controls.

Both deployments are built on the foundation of CatchPulse endpoint protection; neither is a stripped-down version of the other. The choice depends on your specific infrastructure and security requirements:

  • Choose On-Premises for full-spectrum data protection within your own perimeter. This deployment includes the complete SecureAge Suite — SecureData, SecureFile, and SecureEmail — managed entirely on your own servers for total PKI-based control.
  • Choose On-Cloud for streamlined, low-overhead security. This deployment adds Vulnerability Assessment and cloud-driven threat scanning, allowing you to secure your environment without the need to manage servers, certificates, or high-availability (HA) clusters.
  •  

No. You can set up automated email notifications and scheduled reporting. Receive security health summaries and threat activity reports directly in your inbox on a weekly or monthly basis, keeping you informed without the manual overhead.

Identity & policy

Yes—supports AD synchronisation for user/device management.

(On-premises only)

SecureAge Central manages endpoints centrally, across cloud (SaaS) or on-premises deployment.

Public Key Infrastructure (PKI) & key management

Supports certificate lifecycle operations such as issuing, renewing, and revoking certificates (capabilities depend on your deployment and policy design).

SecureAge supports integration with secure devices (e.g., HSM and smart cards) where PKI/key protection is required. Exact supported standards can be provided following a technical consultation.

SecureAge Central enforces zero-drift compliance. Administrators can centrally lock encryption policies, and the system will automatically overwrite any unauthorized local changes to ensure the organization remains fully protected.

Logging & audit

Yes—SecureAge Central collection/visibility and logging supports operations and audit readiness (detail depends on configuration).

The dashboard features real-time audit tracking. It maintains a complete, immutable log of intercepted threats, policy applications, and document access. This allows you to generate audit-ready reports for regulators in minutes, rather than days.

Deployment & licensing

Cloud (SaaS) or on-premises.

SaaS subscription model or on-premises (per-VM image).