• Overview
  • Acclaim
  • Editions
  • Details
  • Standards
  • Related Info


SecretAgent is the world's leading file encryption and digital signature utility. Interoperable across a wide range of platforms (Windows, Linux, Mac OS X, and most UNIX systems), it's the perfect solution for your data-at-rest or data-in-transit security requirements, regardless of the size of your organization.

NEW!  SA/TE adds automatic, application-transparent file encryption capabilities to SecretAgent using centrally-managed rulesets that can be used to enforce the protection of sensitive files with no direct user intervention.

Employing the latest cryptographic standards, SecretAgent ensures the confidentiality, integrity, and authenticity of your data by providing the following functionality:


encrypt, or encrypt & sign
decrypt, or decrypt & validate
sign / validate
securely erase

for confidentiality
      (with optional sender authentication)
for sender authentication
for confidentiality
for data integrity checking (message authentication)

SecretAgent 7 relies on ISC CDK 8.0 cryptographic library which was recently awarded NIST FIPS 140-2 Validation Certificate #3105. SecretAgent 6 introduced a more intuitive graphical user interface, with integrated add-in modules for the management of user certificates (and LDAP directory queries), optional SpyProof! functionality, and the authoring of security policy files for system administrators. Continuing in the SecretAgent 5 tradition, it transparently manages each user's key history, supports DAS and S/MIMEv3 CMS (RFC3852) on most platforms, and contains an integrated OCSP client.

OMB graphic ISC products can be used to satisfy
OMB Memorandum M-06-16 security requirements!

Critical Acclaim

CWID logo ISC's SecretAgent/DAS interoperability demonstration project (IT 03.09) for CWID 2006 has been judged a "top performing technical solution" and is listed among the top twelve "standout" projects in the final report.
COA logo
DISA logo According to the U.S. Defense Information Systems Agency (DISA), SecretAgent "is the only known product approved by NSA for use in DOD classified environments, that allows a migration path to the DMS with Fortezza encryption cards." (Commerce Business Daily, Jan. 15, 1997.)
SC Magazine logo In their review of SecretAgent, SC Magazine arrived at this verdict: "This solution will sit happily on a stand-alone machine or network and provides the means to secure data using either PKI or self-signed transactions. The installation is easy and the solution proved to be both intuitive and user-friendly." It was awarded 5 out of 5 stars for ease of use, performance, and value.
WAEA logo A World Airline Entertainment Association (WAEA) Technical Specification says that "SecretAgent, the most popular encryption tool for airline entertainment systems, is used primarily for VOD [video-on-demand ] or scheduled viewing systems..."

†Strict confidentiality agreements have prohibited us from publicly identifying our largest customers for more than a decade, putting us at a significant disadvantage with respect to our competition. However, since the references to some of our business relationships quoted above have appeared elsewhere on the Internet, we feel that citing them here for advertising purposes is not unreasonable.

SecretAgent Editions

ISC Security Console, the new cross-platform integrated framework for SecretAgent and other ISC security tools, is now available in the following editions:

  ISC Security Console Edition
Feature Reader Enterprise Administrator
Home Page
green check
green check
green check
SA6 encrypt/decrypt/sign/validate
decrypt only
green check
green check
Certificate Management Module
green check
green check
green check
Directory Access Module
green check
green check
PolicyAgent Module
green check
SA/TE Module
(transparent encryption)
(extension available separately)
SpyProof! Module
(encrypted Windows partitions)
(exteinsion available separately)


Screen Shot



This screen shot shows the ISC Security Console Enterprise Edition as it would appear without SpyProof! installed. Administrator Edition includes a PolicyAgent module accessible via an additional button at the bottom of the left-hand navigation panel.

Product Details

Interoperable versions of SecretAgent are available on several platforms. Click on the link below for more information and some screen shots:

SecretAgent 6.0 for Windows, Linux, Mac OS X, and other UNIX platforms

Feature Comparison Summary for SecretAgent on various platforms

Command line executable and linkable library versions of SecretAgent are also available on all supported platforms.

X.509 Support

SecretAgent uses standard X.509 version 3 certificates for encryption; CRL usage, retrieval and auto-updating via CRL distribution points are optional. Deploy SecretAgent for use with any existing PKIX-compliant PKI or use it with self-signed certificates if no PKI is available. We have performed interoperability testing with all major Certificate Authorities and PKI vendors (e.g., Comodo, Entrust, GlobalSign, and Verisign).

In February 2010, after extensive testing at DISA's JITC PKI Certification Lab at Ft. Huachuca, SecretAgent 6.0.3 was awarded a formal certification of full interoperability with the DoD PKI. According to the Certification Memo, JITC has found SecretAgent to be compliant with "the applicable requirements defined in Department of Defense Class 3 Public Key Infrastructure Public Key-Enabled Application Requirements," 1.0, 13 July 2000. (The October 2002 JITC Interoperability Test Summary for SecretAgent 5.6 for its DoD PKI interoperability certification is also available.)

Standards Compliance

SecretAgent fully satisfies NIST FIPS 140-2 and DoD/CNSS NSTISSP No. 11 acquisition requirements for COTS security and information assurance products. The product is available to all government agencies through a DoD/OMB/GSA blank purchase agreement (BPA) recently awarded to our reseller Carahsoft Technology Corp.

More detailed information about SecretAgent's compliance with relevant federal and industry cryptographic standards is available here. Some information on the use of SecretAgent to achieve HIPAA compliance is here.

JITC logo    DISA logo