Full Disk and Removable Storage Encryption


CryptoMill's SEAhawk data security products are the ideal security solution to protect sensitive data anywhere in your organization and against data leakage or loss. CryptoMill's SEAhawk can be easily installed on Windows-based laptops, notebooks, desktops or servers and provides additional security for USB thumb drives, Firewire / USB external drives, ZIP Drives, CDs, DVDs, iPods, any other external storage device recognized by Windows and more. Risks of data breaches due to loss of theft can be eliminated.


CryptoMill security solutions seamlessly integrate into your existing computing infrastructure. With a high ROI and a low TCO it just makes sense to add in the extra layers of protection to safeguard your organization’s data and reputation. By using the intuitive and easy to use CryptoMill Security Management platform, organizations can create policies, setup Trust Boundaries, manage data movement and stop security breaches from occurring.


Convenient Security


• Single Sign On        • Simple User Interface        • Quick Deployment         • Device Agnostic         • Access Recovery

Flexible Architecture

Limitless Functionality


Use with any number of devices, files, users and create any number of Trust Boundaries.

Mobility Friendly


Fully functional, even when disconnected from the network

Limitless Functionality


Use with any number of devices, files, users and create any number of Trust Boundaries.



SEAhawk comes with extensive logging and reporting which ensures compliance, especially in the case of suspected lost or stolen laptops

Simple Deployment and Management


With automatic enrollment, and instant SED activation, you are protected right away. SEAhawk keeps management to the bare minimum to get you working as fast as possible.

Low Total Cost of Ownership


• No key servers

• Centralized recovery

• Admin Login for IT convenience

• Instant activation

• Secure erase

Multi-user support, single sign-on


Cryptomill SEAhawk supports multiple users on each machine equipped with an SED drive. Each user has their own password and has the option of signing on directly to their Windows desktop through single sign-on.

Painless access recovery for enterprises


Cryptomill SEAhawk provides three ways of unlocking an SED without knowing the user credentials:


• Personal recovery

• Help Desk recovery

• Admin Login

 SEAhawk Features


SEAhawk for servers

Software FDE

Software Full Disk Encryption is available for non SEDs. We use the government grade AES cipher to secure your system disks, fixed disks, removable storage devices, and files. There is no conscious decision to make as to whether a document is sensitive enough to be encrypted or not. Everything on the Disk is encrypted! By virtue of FDE, encryption is mandatory and enforceability comes naturally.

Hardware FDE (SED)

Self-Encrypting Drives (SEDs), encrypt data themselves. Self-Encrypting Drives provide all the benefits of software FDE with none of its drawbacks. SEAhawk protects your entire disk with full disk encryption, intelligently turns on authentication for Self-Encrypting Drives if you have them or falls back to software-based FDE for your legacy drives. The UI and operational experience is the same in either case.


Centralized Management

Using advanced state-of-the-art Web-standards based protocols, administrators are able to setup, configure and manage their organization’s security.


Cryptographic Erase

A company's data is its life-blood. Many companies have implemented various methods of backing up and securing data, since data loss and data theft can be disastrous. Encryption is one way to ensure that data is protected from unauthorized access and data theft.

Unattended Login For System Maintenance

As the SEAhawk-protected PC enters a special boot environment when it is powered up. This is known as the Pre-boot Authentication Environment. In typical daily usage, the PC’s user logs in through the pre-boot environment, providing his/her password to authenticate, and then the PC boots through into Windows.


However, IT maintenance operations require a different means to boot into Windows.


In a centrally-managed enterprise, many IT operations (such as performing software upgrades, installing OS service packs, patching, etc.) require access to the PC in the absence of the day-to-day end-user. Typically, this access is needed when upgrades are done overnight, a process which keeps the PC up-to-date without interrupting the users’ productivity during the day.


In order to support this kind of automated PC maintenance, the SEAhawk pre-boot environment provides an Unattended Login capability. To take advantage of this feature, the PC must be connected to the enterprise network, and must be able to contact the CryptoMill Site Active Management Server (SAMS) over the network. (The SAMS is a light-weight management server that resides on the enterprise’s network.)

USB Protection And Much More

Prevents copying of sensitive data to unencrypted USB drives and removable media while permitting use of encrypted media. Email File Encrypter Protect Email attachments and files of any type with SEAhawk’s easy, ‘point-and-click’ file protection.

Trust Boundaries

A Trust Boundary (TB) provides data containment by binding the data to an organization. This prevents data from falling into the wrong hands either accidentally or intentionally. TBs Protect Data, Prevent Internal Breaches and allow for Easy Group Sharing.


Private Virtual Disks

Keep sensitive information private, even from other users of the same hardware using encrypted SEAhawk Virtual Disks.


Email File Encryptor

Protect email attachments and files of any type with SEAhawk’s easy, ‘point-and-click’ file protection.


Automatic Authentication

Authentication is provided by secure Site Active Management Server (SAMS) Data protection runs as a service – no user intervention required


Proudly Canadian