comforte AG SecurDPS Enterprise

comforte AG is a privately held software company based in Wiesbaden, Germany, focused on data protection and digital payments. Founded in 1998 with a connectivity solution for HPE NonStop fault-tolerant systems, it gained early adoption among large banking and retail organizations needing secure communications between mission-critical systems. Over time, the offering evolved into encryption and tokenization solutions designed for environments that cannot tolerate downtime. With subsidiaries in the USA, Australia, and Singapore, the company serves more than 500 customers worldwide, including over forty Fortune 500 enterprises, still primarily in banking and financial services.

As digitalization accelerates across industries, secure storage, processing, and exchange of data has become central to business continuity. Broad regulations such as GDPR have intensified pressure on any organization handling personal data, yet recurring high-profile breaches show that many large enterprises still struggle to implement consistent, enterprise-wide security across heterogeneous environments. A growing alternative is data-centric security: protecting data at its source and enforcing uniform policies across on-premises systems, clouds, databases, and legacy platforms, with integration effort as a key success factor.

comforte AG’s SecurDPS Enterprise targets this approach with a scalable, fault-tolerant tokenization platform that replaces sensitive data with non-sensitive equivalents. It differentiates through a patented stateless tokenization algorithm (avoiding a centralized token vault), a self-healing cluster architecture of in-memory Protection Nodes managed via separate console components, and extensive integration options spanning SDK/SmartAPI and transparent methods such as virtual file system interception, Java-based stream filters for Big Data, and I/O interception for Linux/Unix and HPE NonStop. Recent additions include data masking and hardware security module support, with a roadmap toward broader platform capabilities and future alignment with DevOps/DevSecOps.

• comforte AG is headquartered in Wiesbaden, Germany and is privately held.
• The company’s roots date to 1998 with a connectivity solution for HPE NonStop systems.
• comforte AG has wholly owned subsidiaries in the USA, Australia, and Singapore.
• The company serves over 500 customers worldwide, including more than forty Fortune 500 enterprises.
• SecurDPS Enterprise tokenizes sensitive information by replacing it with non-sensitive equivalents with no exploitable value.
• Tokenization is described as format-preserving and typically requiring substantially fewer computational resources than traditional encryption.
• The ANSI X9.119-2 standard lists comforte AG’s stateless tokenization algorithm as a reference tokenization method.
• A SecurDPS deployment is a cluster of multiple virtual appliances called Protection Nodes.
• Protection Nodes use a hardened operating system, expose no unprotected interfaces, use no persistent storage, and perform operations in-memory.
• The most recent SecurDPS version adds data masking and support for hardware security modules for key management.

• “There is however an alternative approach that has been gaining traction recently – data-centric security.”
• “Just protect the data at its source instead of securing each piece of infrastructure separately.”
• “Its successful deployment depends critically on the solution’s capability to enforce the same security and compliance policies consistently across all systems.”
• “Tokenization technology to replace sensitive information in various data sources with non-sensitive equivalents, which have no exploitable value.”
• “By ensuring that existing business applications are operating on tokenized data instead of original information, businesses can successfully reduce risks of data breaches.”
• “As opposed to many earlier-generation methods which rely on a centralized database (token vault) … a stateless method requires just a small randomly generated table unique for each client system.”
• “This does not merely eliminate a single point of failure in the overall architecture but ensures that the attack surface of the tokenization system is made significantly smaller.”
• “All protection nodes form a self-healing cluster system that ensures uninterrupted processing even when individual nodes fail.”
• “By running the protection nodes close to applications and centralizing the management of multiple clusters in the cloud, a multitenant ‘tokenization as a service’ model can be implemented.”
• “The one thing the platform does … it does exceptionally well – offering a flexible and scalable solution to address modern compliance requirements.”