Sphyrna Security
Hardware-enforced cross domain solutions and Verity GRC, built in Canada since 2000.
Canada
- Founded2000
- Headcount11 to 50
What this listing assures you
How QSECDEF membership works →- TrainingTeam members take part in continuous training and skills updates with our team.
- VettedWe have high confidence in this team's capabilities and skills base.
- Provable claimsCommitment to transparent and technically correct communications to customers.
- QSECDEF ContributorCommunity contributor and presenter.
- Membership CharterHas signed the Members' Charter, committing to fair and transparent business practices.
- LeadershipAttends the QSECDEF Annual Symposium.
About Sphyrna Security
Sphyrna Security was founded in 2000 by Alan Magar, initially offering professional services to the Government of Canada before becoming a cyber security vendor specialising in cross domain solutions and governance, risk and compliance. Its technical leadership team is made up of enterprise architects, networking specialists and former military and defence specialists.
The NGXS product line enforces one-way data transfer physically, using optical-electrical-optical isolation and FPGA protocol filtering. The UGW-100 (10 Gbps) and UGW-200 (25 Gbps) unidirectional gateways are Common Criteria EAL 4+ certified, NSA approved and compliant with NCDSMO Raise the Bar guidance. Passive and OEO data diodes, a hardware filtering diode and a 16-port data diode array complete the range.
Verity GRC, Sphyrna's compliance software, supports ITSG-33 and NIST 800-53 programmes with preloaded profiles, a risk registry, policy assessment and audit features, and is also offered as a managed GRC service. The SaaS version is approved by the Canadian Centre for Cyber Security for Protected B-Medium-Medium (PBMM), and the company's management system is certified to ISO/IEC 27001:2022.
Reviewed 30 October 2026 Source: sphyrnasecurity.com/about-us
What they offer
NGXS UGW-100 Unidirectional Gateway
10 Gbps 1U appliance with assured one-way transfer, hardened OS, SELinux mandatory access control and two-person administration; EAL 4+ certified and NSA approved.
sphyrnasecurity.comNGXS UGW-200 Unidirectional Gateway
25 Gbps unidirectional gateway with XML schema checking and TCP and UDP support; EAL 4+ certified and NSA approved.
sphyrnasecurity.comNGXS data diodes
Passive optical and OEO data diodes at 10 or 25 Gbps, plus a hardware filtering diode, for protocol-agnostic one-way streams.
sphyrnasecurity.comHigh performance gateways
2U appliance for assured unidirectional transfer with redundant power supply.
sphyrnasecurity.comVerity GRC
Compliance software with ITSG-33 and NIST 800-53 profiles, a risk registry, plan of action tracking, role-based access and audit.
sphyrnasecurity.comManaged GRC
Control assessments and workflow management delivered by Sphyrna's compliance team using Verity GRC, for organisations without a dedicated compliance function.
sphyrnasecurity.comWho they work with
Proof
People
Leadership as listed on sphyrnasecurity.com/about-us, checked 30 October 2026