Post-quantum cryptography is here — SecureAge is prepared.

Frequently Asked Questions

Simple answers for a safer world.

Quick solutions and detailed insights to help you get the most out of your protection.
Table of Contents

General

Products & packaging

  • SecureData: Automatic file-level protection
  • SecureEmail: Email protection in Outlook workflow
  • SecureFile: Protected file sharing with signing/encryption and restrictions
  • SecureAge Central: Central management and policy control
  • CatchPulse: Endpoint protection with allowlisting + cloud-based scanning

Yes. SecureAge offers a suite bundle that typically includes SecureData, SecureEmail, and SecureFile. Packaging can vary by deployment and required capabilities (e.g., usage restrictions / application controls).

Most endpoint products are licensed per device. SecureAge Central is available as SaaS (cloud) or on-premises (per-VM image).

Deployment & operations

 Yes. SecureAge supports both cloud and on-premises deployment models.

No, SecureAge products are designed to run in the background and minimise user workflow changes. Real-world performance depends on endpoint specifications and policy strictness, so most customers pilot first and tune policies.

Compliance & assurance

Yes. SecureAge Solutions are designed to help organisations meet global privacy and security standards. By enforcing strict data protection, access controls, and detailed activity logs, we make it easier for you to stay compliant with regulations like GDPR, HIPAA, and others. You can view our full compliance details here.

Yes, SecureAge Solutions reduce insider-risk by controlling access to protected data, enforcing policy, and providing audit trails

SecureAge provides professional services — customisations, deployment, trainings and technical support options for our customers.

SecureData

Overview

SecureData automatically protects files based on policy so sensitive data remains protected even when files are created, modified, copied, or moved.

SecureData eliminates the risk of data leakage at the source. By keeping protection persistent, your files remain encrypted and secure even when moved to downloads, USB drives, shared folders, or backup locations.

How it works

Yes. Protection follows the file so data remains unreadable without authorisation.

No. SecureData is designed for automatic protection based on policy, with manual options available when needed.

SecureData applies PKI-based protection so only authorised identities can access protected files.

With Application Binding function in SecureData, it can restrict protected files to only open in approved applications, reducing leakage via untrusted apps.

Deployment & management

Admins define policies such as file filters/rules (e.g., file types/locations) to control what is automatically protected.

Typically through central policy/config distribution (often managed via SecureAge Central).

Licensing & procurement

Per device.

Supported OS is listed at the top of the SecureData product page.

SecureEmail

Overview

SecureEmail protects emails and attachments through an Outlook-based workflow that supports classification, encryption, signing, and usage controls.

How it works

SecureEmail supports sending protected emails to external recipients with no software installation required by the recipient.

No. By using the SecurePDF feature within SecureEmail, you can send encrypted messages and attachments that recipients open using a simple OTP or password.

Emails are protected so only intended recipients can access the content, reducing exposure from interception or accidental forwarding.

Protection remains enforced; unauthorised recipients won’t be able to access protected content. Forwarding can also be restricted by policy.

Comparisons

PGP commonly uses a decentralised “web-of-trust” model and often requires more user involvement for trust decisions and setup. PKI-based approaches use certificate authorities and central trust policies, reducing end-user decision burden.

Licensing & procurement

Per Device.

Supported OS is listed at the top of the SecureEmail product page.

SecureFile

Overview

SecureFile enables protected file sharing using signing, encryption, and optional usage restrictions so only authorised recipients can access content.

No. By using the SecurePDF feature within SecureFile, you can send encrypted documents that recipients open using a simple password.

Signing & encryption

Signing proves authenticity and integrity. Encryption prevents unauthorised reading of the content.

Yes—the digital signing in SecureFile supports workflows where multiple signers are required.

Usage restrictions (DRM)

Depending on policy:SecureFile can restrict copy, print, screen capture, forwarding/sharing behaviour, and set expiry.

The protected file will be deleted when triggered after expiry date.

File formats

SecureFile can generate protected formats that indicate the applied protection type (e.g., signed, signed+encrypted, DRM protected).

Use SecureData for always-on protection during daily work. Use SecureFile for controlled sharing outside your organisation.

Licensing & procurement

Per device.

Supported OS is listed at the top of the SecureFile product page.

CatchPulse

Overview

CatchPulse protects endpoints by blocking untrusted processes by default (allowlisting approach) and validating files using cloud-based scanning.

Most antivirus programs attempt to keep up with a never-ending “Most Wanted” list of bad files. CatchPulse flips this by using a “Guest List” (Allowlisting) that only lets trusted, safe programs run. By blocking everything else by default, it stops brand-new threats that other tools might miss, while using Cloud AV to constantly verify that your approved files stay secure.

EDR focuses on detection, monitoring, and response after suspicious behaviour occurs. CatchPulse focuses on prevention before execution.

Allowlisting operations

The baseline allowlist is built automatically during initial deployment. Ongoing effort depends on how strict your policy is and how frequently your environment introduces new software.

The user can request approval; the admin can approve or reject the request.

Yes—policies in CatchPulse can control removable device behaviour (read/write controls and device allow/block rules).

Yes. Some attacks are file-less, allowing them to bypass traditional anti-malware and threaten system security. CatchPulse addresses this by letting users create custom rules that extend allowlisting coverage to these fileless threats—even those that exploit trusted applications to infect a PC.

Licensing & procurement

Per device.

Hardware requirements

  • 2 GHz Pentium 4 or higher processor
  • 1GB of RAM or as recommended by the Windows OS whichever is higher
  • 300 MB hard disk free space or more
  • Local hard disk that is formatted with NTFS file system
  • Minimum screen resolution: 1024×768 (At 100% Scale)


Version

Cilck here to see our full history

Supporting operating systems

  • Windows 11 (64-bit) 
  • Windows 10 (32-bit and 64-bit) 
  • Windows Server 2025 (64-bit)
  • Windows Server 2022 (64-bit) 
  • Windows Server 2019 (64-bit) 
  • Windows Server 2016 (64-bit)

SecureAge Central

Overview

SecureAge Central is the management layer used by administrators to manage policies, users, endpoints, certificates/keys, and operational controls.

Both deployments are built on the foundation of CatchPulse endpoint protection; neither is a stripped-down version of the other. The choice depends on your specific infrastructure and security requirements:

  • Choose On-Premises for full-spectrum data protection within your own perimeter. This deployment includes the complete SecureAge Suite — SecureData, SecureFile, and SecureEmail — managed entirely on your own servers for total PKI-based control.
  • Choose On-Cloud for streamlined, low-overhead security. This deployment adds Vulnerability Assessment and cloud-driven threat scanning, allowing you to secure your environment without the need to manage servers, certificates, or high-availability (HA) clusters.
  •  

No. You can set up automated email notifications and scheduled reporting. Receive security health summaries and threat activity reports directly in your inbox on a weekly or monthly basis, keeping you informed without the manual overhead.

Identity & policy

Yes—supports AD synchronisation for user/device management.

(On-premises only)

SecureAge Central manages endpoints centrally, across cloud (SaaS) or on-premises deployment.

Public Key Infrastructure (PKI) & key management

Supports certificate lifecycle operations such as issuing, renewing, and revoking certificates (capabilities depend on your deployment and policy design).

SecureAge supports integration with secure devices (e.g., HSM and smart cards) where PKI/key protection is required. Exact supported standards can be provided following a technical consultation.

SecureAge Central enforces zero-drift compliance. Administrators can centrally lock encryption policies, and the system will automatically overwrite any unauthorized local changes to ensure the organization remains fully protected.

Logging & audit

Yes—SecureAge Central collection/visibility and logging supports operations and audit readiness (detail depends on configuration).

The dashboard features real-time audit tracking. It maintains a complete, immutable log of intercepted threats, policy applications, and document access. This allows you to generate audit-ready reports for regulators in minutes, rather than days.

Deployment & licensing

Cloud (SaaS) or on-premises.

SaaS subscription model or on-premises (per-VM image).

Download Brochure (PDF)

Download Our Brochures

Discover how to keep your data protected at all times. Download our brochure to see how SecureData delivers always-on encryption, simplifies compliance, and enable secure collaboration across your organisation.

Product Brochure(s) Needed *
By clicking “Submit” below, you agree to the Privacy policy

[CVE-2026-55980] Stack Buffer Overrun

CVE ID

CVE-2026-55980 | 5.5 (Medium)

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition. 

Affected & Fixed Versions
Product Vulnerable Version Fixed Version Status

CatchPulse 

10.10.0 and earlier
10.10.1

✓Resolved

Recommended Action

Users and administrators of affected products are advised to update to the latest versions.

Acknowledgement

SecureAge thanks Ms Ang Kar Min for responsibly disclosing this issue through coordinated vulnerability disclosure.

Advisory Details
Status

✓ Resolved

Severity

Medium

Product

CatchPulse

Platform

Windows

Attack Type

Local

[CVE-2026-55979] Named Pipe NULL DACL

CVE ID

CVE-2026-55979 | 5.2 (Medium)

An improper access control check in CatchPulse’s named pipe communication interface could allow an attacker to invoke CatchPulse functions. It is limited to operations that enforce more restrictive security policies.

Affected & Fixed Versions
Product Vulnerable Version Fixed Version Status

CatchPulse 

10.10.0 and earlier
10.10.1

✓Resolved

Recommended Action

Users and administrators of affected products are advised to update to the latest versions.

Acknowledgement

SecureAge thanks Ms Ang Kar Min for responsibly disclosing this issue through coordinated vulnerability disclosure.

Advisory Details
Status

✓ Resolved

Severity

Medium

Product

CatchPulse

Platform

Windows

Attack Type

Local

[CVE-2026-55978] Improper Access Control in IOCTL Handler Leading to Security Policy Bypass

CVE ID

CVE-2026-55978 | 8.4 (High)

An improper access control vulnerability in CatchPulse could allow a non-administrative local attack to connect to an unrestricted kernel filter communication port and bypass CatchPulse’s security policy Enforcement.

Affected & Fixed Versions
Product Vulnerable Version Fixed Version Status

CatchPulse 

v10.10.0 and earlier
10.10.1

✓Resolved

Recommended Action

Users and administrators of affected products are advised to update to the latest versions.

Acknowledgement

SecureAge thanks Ms Ang Kar Min for responsibly disclosing this issue through coordinated vulnerability disclosure.

Advisory Details
Status

✓ Resolved

Severity

High

Product

CatchPulse

Platform

Windows

Attack Type

Local

[Resolved] Escalation of Privilege in SecureAge Security Suite

A privilege escalation vulnerability has been identified and resolved. Users on affected versions should update immediately.

Vulnerability Overview

A privilege escalation vulnerability was identified in SecureAge Security Suite for Windows. A locally logged-in user could exploit this flaw to create, modify, or delete files in privileged system locations — actins that should only be available to administrators. This vulnerability has been fully resolved in the versions listed below. 

Technical details
The vulnerability stems from how SecureAge Security Suite handles symbolic links during normal operation. A local attacker could create specific symbolic links n the system. When the SecureAge software ran, it would follow  those links and perform file operations in privileged Windows path locations . This could allow an unprivileged user to plant, alter, or remove files they would not ordinarily have access to.
Affected & Fixed Versions
Product Vulnerable Version Fixed Version Status

SecureAge Security Suite

7.0.37 and earlier

7.0.38

✓Resolved

SecureAge Security Suite

7.1.10 and earlier

7.1.11

✓Resolved

SecureAge Security Suite

8.0.17 and earlier

8.0.18

✓Resolved

SecureAge Security Suite

8.1.17 and earlier
8.1.18

✓Resolved

Recommended Action

Update to the fixed version or any later release immediately. No workaround is available—patching is the only resolution. If you are unsure which version you are running, open SecureAge Security Suite and check Help>About. Contact our support team if you need assistance with the update process. 

Acknowledgement

SecureAge thanks GovTech Cyber Security Group (CSG) and CSA Cyber Security Engineering Centre (CSEC) for responsibly disclosing this issue through coordinated vulnerability disclosure. 

Advisory Details
Status

✓ Resolved

Severity

High

Product

SecureAge Security Suite

Platform

Windows

Attack Type

Local