Cosmian Data Protection Suite
cosmian.com
What it is
Cosmian Data Protection Suite provides cryptographic tools for protecting data in use and in public clouds. Its products include key management, confidential computing, confidential AI, and encrypted search. Cosmian KMS centrally manages encryption, decryption, keys, and certificates, with storage, generation, rotation, distribution, and usage policies. KMS is fully open source and includes FIPS 140-3 validated libraries, Covercrypt post-quantum encryption with access policies, and Findex searchable encryption. Cosmian offers verifiable confidential virtual machines and confidential AI runners for cloud workloads. Cosmian AI supports confidential GenAI translation and summarization without coding, with Word and Chrome integrations. Findex provides encrypted exact, prefix, and suffix searches with Rust, JavaScript, Python, Java, and Flutter wrappers. Products are available through AWS, Azure, and Google Cloud marketplaces. Deployment options include hybrid, self-hosted, API, extension, Linux, macOS, web, and Windows.
Spec sheet
- What it does
- The suite combines key management, confidential computing, confidential AI, encrypted search, and post-quantum encryption for protecting data in use, at rest, and in transit.Read 14 Oct 2026 · cosmian.com
- API
- The KMS exposes a KMIP-compatible API and the documentation includes API endpoints, JSON TTLV, and operation references.Read 14 Oct 2026 · docs.cosmian.com
- Support
- Cosmian directs technical users to online documentation, GitHub, and a Discord technical community.Read 14 Oct 2026 · docs.cosmian.com
- License
- The GitHub organization identifies the KMS as source available under the Business Source License BUSL-1.1, so the suite is not uniformly open source under one permissive license.Read 14 Oct 2026 · github.com
- CLI and GUI
- KMS provides a command-line client with integrated help plus a graphical interface supporting client certificates and OIDC tokens.Read 14 Oct 2026 · docs.cosmian.com
- Cloud marketplaces
- Cosmian products are offered through AWS, Azure, and Google Cloud marketplaces.Read 30 Sep 2026 · cosmian.com
- Company founded
- LinkedIn lists Cosmian as founded in 2018.Read 14 Oct 2026 · linkedin.com
- Company headquarters
- LinkedIn lists headquarters at 55 Rue La Boétie in Paris, France.Read 14 Oct 2026 · linkedin.com
- Company size
- LinkedIn lists Cosmian as a privately held company with 11–50 employees.Read 14 Oct 2026 · linkedin.com
- Confidential AI
- Cosmian AI supports confidential text translation and summarization inside Cosmian VM and offers Word and Chrome plugin integrations.Read 14 Oct 2026 · cosmian.com
- Confidential computing
- Cosmian offers verifiable confidential virtual machines and confidential AI runners that keep code and data protected in cloud environments.Read 30 Sep 2026 · cosmian.com
- Confidential VM
- Cosmian VM isolates workloads in hardware-backed trusted execution environments with memory encryption, disk encryption, and host isolation.Read 14 Oct 2026 · eviden.com
- Covercrypt
- Covercrypt is presented as a client-side encryption library with post-quantum resistance and encrypted access policies.Read 14 Oct 2026 · cosmian.com
- Cryptography
- KMS embeds FIPS 140-3 validated libraries, Covercrypt post-quantum encryption with access policies, and Findex searchable encryption.Read 30 Sep 2026 · cosmian.com
- Database integrations
- KMS documentation lists Oracle TDE, MongoDB, MySQL Enterprise, Microsoft SQL Server External EKM, and PostgreSQL integrations.Read 14 Oct 2026 · docs.cosmian.com
- Documentation depth
- The technical documentation is organized by security use case and product and includes installation, configuration, integrations, API, algorithms, audits, compliance, and KMIP operation references.Read 14 Oct 2026 · docs.cosmian.com
- Encrypted search
- Cosmian Findex provides encrypted exact, prefix, and suffix searches and has Rust, JavaScript, Python, Java, and Flutter wrappers.Read 30 Sep 2026 · cosmian.com
- Findex
- Cosmian Findex provides probabilistically encrypted exact, prefix, and suffix search over encrypted indexes.Read 14 Oct 2026 · cosmian.com
- Findex performance
- The Findex page reports approximately eight-microsecond search latency and twelve-microsecond insert latency.Read 14 Oct 2026 · cosmian.com
- Findex SDKs
- Findex is offered as a Rust library with JavaScript, Python, Java, and Flutter wrappers.Read 14 Oct 2026 · cosmian.com
- Free test limits
- The KMS demo server is free to test, resets its database weekly, requires no authentication, and has no graphical interface.Read 30 Sep 2026 · cosmian.com
- Funding
- Elaia reports a €1.4 million seed round for Cosmian in March 2019, led by Elaia with Acequia Capital, Fiblac, and business angels participating.Read 14 Oct 2026 · elaia.com
- HSM integrations
- Supported HSM families include Trustway Proteccio, Crypt2Pay, Utimaco, Nitrokey HSM 2, and SmartCard HSMs.Read 14 Oct 2026 · docs.cosmian.com
- HSM support
- KMS supports HSMs including Trustway Proteccio, Crypt2Pay, Utimaco, Nitrokey HSM 2, and Smartcard HSMs.Read 30 Sep 2026 · docs.cosmian.com
- Key lifecycle
- KMS supports key storage, generation, rotation, distribution, and usage policies.Read 14 Oct 2026 · marketplace.microsoft.com
- KMS
- Cosmian KMS centrally manages encryption and decryption operations, keys, and certificates, including lifecycle controls and PKI integration.Read 14 Oct 2026 · cosmian.com
- KMS architecture
- The KMS is a Rust server that combines key lifecycle management, an encryption service, and public-key infrastructure.Read 14 Oct 2026 · docs.cosmian.com
- KMS integrations
- Documented integrations include AWS BYOK and Fargate, Azure BYOK and EKM, Google CMEK and CSEK, Google Workspace CSE, and Microsoft 365 DKE.Read 14 Oct 2026 · docs.cosmian.com
- KMS performance
- The KMS product page claims up to five million messages processed in under five seconds for on-the-fly encryption.Read 14 Oct 2026 · cosmian.com
- KMS standards
- KMS supports KMIP versions 1.0–1.4 and 2.0–2.1 in binary and JSON formats and offers FIPS 140-3 mode.Read 14 Oct 2026 · docs.cosmian.com
- Legal name
- Crunchbase identifies the legal entity as Cosmian Tech SAS.Read 14 Oct 2026 · crunchbase.com
- Limit: demo server
- The free KMS demo has weekly database resets, requires no login, and has no graphical interface.Read 14 Oct 2026 · cosmian.com
- Limit: Findex roadmap
- Semantic similarity search is described as a future enhancement rather than a current capability.Read 14 Oct 2026 · cosmian.com
- Notable news
- Eviden announced on October 6, 2025 that Cosmian KMS technology was integrated into Eviden’s cybersecurity product offering.Read 14 Oct 2026 · eviden.com
- Ownership
- Crunchbase lists Cosmian as acquired by Atos and as a sub-organization of Atos.Read 14 Oct 2026 · crunchbase.com
- Performance
- The KMS product page states that up to 5 million messages can be processed in under 5 seconds.Read 30 Sep 2026 · cosmian.com
- Praise: independent review coverage
- Independent directories report no user reviews, so they provide no repeated reviewer praise or complaint pattern.Read 14 Oct 2026 · sourceforge.net
- Rating on G2
- 0 out of 5 from 0 ratingsRead 14 Oct 2026 · g2.com
- Rating on SourceForge
- 0.0 out of 5 from 0 reviewsRead 14 Oct 2026 · sourceforge.net
- SDKs
- Client support is documented for Python, JavaScript, Dart, Rust, C/C++, and Java through Cosmian cloudproof libraries.Read 14 Oct 2026 · docs.cosmian.com
- Self-hosting
- KMS can be deployed with Debian or RPM packages, Windows and macOS installers, or standard and FIPS Docker images.Read 14 Oct 2026 · docs.cosmian.com
- Standards
- KMS supports FIPS 140-3 mode and KMIP versions 1.0-1.4 and 2.0-2.1 in binary and JSON formats.Read 30 Sep 2026 · docs.cosmian.com
- Storage integrations
- KMS documentation lists VMware, Veeam Backup & Replication, Synology DSM, Snowflake, and Databricks or Spark user-defined functions.Read 14 Oct 2026 · docs.cosmian.com
- Suite purpose
- Cosmian provides a data protection suite using next-generation cryptography to secure data in use and protect data in public clouds.Read 30 Sep 2026 · cosmian.com
- System requirement
- Current KMS documentation requires GLIBC 2.34 or newer, available in Debian 12+, Rocky Linux 9+, and Ubuntu 22.04+.Read 14 Oct 2026 · github.com
- VM hardware limits
- The Microsoft Marketplace listing instructs users to deploy the VM only on DCasv5 or DCadsv5 machine families.Read 14 Oct 2026 · marketplace.microsoft.com
- VM verification
- The VM verifies hardware, boot state, and installed software through signed snapshots and continuous monitoring.Read 14 Oct 2026 · marketplace.microsoft.com
- Workplace integrations
- KMS integrates with Google Workspace Client Side Encryption and Microsoft 365 Double Key Encryption.Read 30 Sep 2026 · docs.cosmian.com
Plans and prices
Strong points and limits
Strong points
- Open-source central key management
- Automated key rotation and policy controls
- Confidential computing and AI options
- Encrypted exact, prefix, and suffix search
- Available through three cloud marketplaces
Limits
- Free KMS demo resets weekly
- Demo requires no authentication
- KMS demo has no graphical interface
Who it suits
The suite suits organizations protecting cloud data, encryption keys, confidential workloads, or searchable encrypted information. It supports teams using hybrid or multi-cloud deployments and listed workplace integrations.
Verdict
Cosmian combines open-source key management with confidential computing, AI, and encrypted search. Its hybrid and multi-cloud options cover several deployment patterns, while commercial pricing requires direct evaluation.
Where Specifiction places it
- Cloud Encryption Software#3 of 239.0