Application-layer encryption that keeps data searchable and usable while encrypted

Encryption at rest protects a disk, not a database that has to be queried. IronCore Labs works one layer up, encrypting data in the application before it reaches the store and keeping it functional there. Cloaked AI encrypts the vector embeddings used in retrieval-augmented generation so that a vector database never holds plaintext representations of source documents, while still returning useful nearest-neighbor results. Cloaked Search does the equivalent for full-text search, allowing encrypted fields to remain queryable in Elasticsearch and OpenSearch. VectorLens addresses the adjacent question of what is already sitting in an embedding store, scanning vectors to identify and classify personal data that was never meant to be there.

SaaS Shield packages the same primitives for software vendors selling into regulated buyers: per-tenant keys, customer-held keys through bring-your-own-key and hold-your-own-key arrangements, key rotation, and tenant-scoped audit logs, so a vendor can offer cryptographic separation between customers instead of relying on application logic alone. The Data Control Platform adds transform encryption, the company's recrypt technology, for cryptographic access control that changes as membership changes. The SDKs are published on GitHub under AGPL with commercial licensing available, and the company is SOC 2 Type 2 certified and runs a bug bounty. IronCore Labs was founded in 2015 in Boulder, Colorado, by Bob Wall and Patrick Walsh, who is CEO, and has raised roughly $6M from investors including Techstars and Next Frontier Capital.