Phylax Enterprise
CMMC compliance, AI agent governance, and post-quantum access control -- in one platform.
Phylax Enterprise is the enterprise layer built on the PhylaxOne distributed authentication protocol. It makes that protocol deployable for security teams, compliance officers, and developers without requiring expertise in threshold cryptography.
Four compliance gaps close. Coverage reaches 100%. One-click evidence package, ready for your C3PAO assessor.
The Distinction
PhylaxOne is infrastructure. Phylax Enterprise is what you buy.
PhylaxOne handles the protocol: FROST threshold authentication, decentralized identity, post-quantum cryptography, distributed storage, and behavioral intelligence. That infrastructure is powerful and technically complete. It is also not what a compliance officer purchases.
Phylax Enterprise wraps those capabilities in the interfaces that security teams, compliance officers, and developers actually operate. A compliance dashboard with real-time control coverage. A one-click CMMC evidence package export. An AI agent management console where administrators define scope boundaries and review action histories. Pre-built connectors for the identity systems already in production.
The result is post-quantum compliant, CMMC-ready identity infrastructure that a team can deploy, operate, and hand to an assessor -- without touching a single line of cryptographic protocol code.
CMMC Level 2
Controls Satisfied by Architecture
The following NIST SP 800-171 Rev 3 controls are addressed at the protocol level -- not through configuration choices or compliance documentation, but by how PhylaxOne operates. These are properties of the system, not claims made in a spreadsheet.
Multifactor authentication for local and network access. PhylaxOne threshold signing requires distributed node participation by architecture -- inherently multi-factor without additional configuration.
Replay-resistant authentication. Every signing ceremony uses a fresh nonce. A replayed request produces an invalid signature immediately.
Multifactor authentication for privileged access. Higher K thresholds for privileged accounts require more node participation, enforced at the protocol level.
Cryptographic mechanisms preventing unauthorized CUI disclosure. ML-KEM and ML-DSA (NIST FIPS 203/204) protect all communication. AES-256 protects data at rest.
Cryptographic protection of CUI in transit. ML-DSA signatures on every authenticated data transfer.
Controlled access, least privilege, and separation of accounts. Verifiable Credentials scope access at the credential level, enforced at authentication time.
CMMC Level 2 certification qualifies for FedRAMP Validated Level 1 under the 2026 Consolidated Rules.
One Phylax Enterprise deployment opens two compliance pathways simultaneously.
Platform Capabilities
What the Platform Delivers
CMMC Evidence Package
One-click export of a formatted evidence package organized for C3PAO assessors. Every authentication event is tagged to the specific NIST SP 800-171 Rev 3 control it satisfies. No manual tagging. No after-the-fact documentation.
Compliance Posture Dashboard
Real-time control coverage tracking. When a node goes offline and coverage drops, the dashboard alerts before an auditor notices. Gap analysis shows which controls are not yet covered and what would close them.
AI Agent Management Console
Provision AI agent identities, define scope boundaries, configure approval workflows, and review full agent action histories. Each agent holds a DID with a Verifiable Credential that enforces its authorized scope at the authentication layer.
Approval Workflows
High-risk agent actions trigger a threshold approval ceremony before completing. Administrators define which action categories require approval and who the designated approvers are. An agent cannot self-authorize beyond its credential scope.
Instant Revocation
When an agent or user is decommissioned, credential revocation takes effect within 60 seconds across all relying parties. No lingering sessions, no cached tokens to chase down.
Enterprise Integrations
Pre-built connectors for Active Directory, Azure AD, and Okta. Phylax Enterprise layers on top of existing directory infrastructure -- no rip-and-replace required. SDK for direct application integration.
Compound Intelligence
The Platform Gets Smarter Over Time
Most security platforms produce alerts. The data accumulates but the intelligence does not compound. Phylax Enterprise is built differently. Every event feeds back into the behavioral intelligence layer. The system that runs today is more capable than the one that ran 90 days ago -- in ways that cannot be replicated by purchasing the same license later.
Per-identity behavioral baselines established
Authentication anomalies are detected that no rule-based system would catch -- the model knows what normal looks like for each specific user and flags deviations from that specific baseline.
Cross-identity attack campaign detection activates
Coordinated attacks against multiple users are visible as campaigns, not isolated events. The model correlates patterns across identities rather than evaluating each authentication independently.
Novel attack pattern detection activates
Behavioral signatures from resolved incidents feed into detection models as anonymized attack patterns. Each resolved case makes detection smarter for every other organization on the platform.
Behavioral intelligence data is specific to your environment. It cannot be transferred to another platform. Switching costs are informational, not contractual.
Who It's For
Three Primary Markets
Defense Industrial Base
Primary marketHealthcare with AI Deployments
Secondary marketEnterprise AI Security
Emerging marketIntegrations
Layers on Top. No Rip-and-Replace.
Phylax Enterprise is designed to work alongside the identity infrastructure already in production. Migration is incremental -- start with the highest-sensitivity systems and expand from there.
Active Directory
AD manages accounts. Phylax Enterprise handles auth for post-quantum and CMMC-required systems. Incremental migration supported.
Azure AD / Entra ID
Pre-built connector layers Phylax Enterprise as a step-up authentication layer for high-sensitivity applications.
Okta
Phylax Enterprise positions as a step-up layer for Okta-managed applications. Standard applications continue using Okta.
Application SDK
JavaScript, Python, and Go. Handles DID resolution, credential presentation, and ceremony coordination. Standard web application integration under two hours.
Pricing
Three Tiers. One Platform.
Pricing is based on user count with a monthly subscription. AI agent management is available as an add-on to any tier. MSSP and white-label licensing available for organizations managing compliance for multiple clients.
Growth
Up to 100 users
Core CMMC compliance + identity management
Scale
100 to 500 users
Full platform + AI agent management + CMMC evidence export
Enterprise
500+ users
Full platform + MSSP options + white-label + dedicated support
Pricing available upon request during the technical briefing.
Start with a technical briefing.
Conducted under NDA. Bring your current CMMC gap assessment or your AI agent deployment questions. We will walk through the control mapping, the evidence package workflow, and the integration path for your existing infrastructure.