Sold by: HyperSphere Technologies Inc
Deployed on AWS
Make stolen data useless. With HyperSphere DNA™ for AWS, compromised S3 credentials alone do not result in data exposure, and data exfiltrated from S3-compatible object storage remains unreadable by human or machine.
Overview
Traditional cybersecurity focuses on preventing attackers from getting in. HyperSphere DNA™ (Data Neutralization Appliance) takes a fundamentally different approach to protecting unstructured data. It assumes attackers will compromise cloud infrastructure or storage credentials, assumes breach, and ensures that stolen data remains unreadable.
This approach is sometimes associated with the emerging category of cyberstorage (security built into the storage layer itself). HyperSphere DNA actually neutralizes data before it's written to storage, so exfiltrated objects are unreadable by design, not just access-controlled.
Unlike conventional encryption, which relies on persistent keys that can be compromised along with the data, HyperSphere DNA uses ephemeral key derivation: keys exist only for the instant they're needed, then are destroyed.
How it works:
Deploys as a transparent layer between applications and S3-compatible object storage, using standard S3 API calls; no application code changes required
Intercepts every write, segments data, and uniquely encrypts (AES-256-GCM) each frame with an ephemeral key
Authorized applications continue reading and writing data normally, with no disruption to performance or workflow
Keys are generated at the moment of need and immediately zeroized, never stored or transmitted
Forwards only ciphertext to object storage; no plaintext ever leaves the node
Without persistent keys, exfiltrated data remains unreadable by attackers, even AI and quantum computers
Security posture:
Runs on hardened Ubuntu instances with a minimal attack surface
No default credentials; IMDSv2 enforced; least-privilege instance role
Bundled Prometheus and Grafana for operational visibility
Depending on jurisdiction, data that remains unintelligible after exfiltration may qualify for reduced breach notification obligations, supporting security and compliance objectives alongside technical protection.
Available in five tiers: Developer, Team, Business, Capacity, and Enterprise/Gov.
Highlights
- Deploy in minutes: Data neutralization appliance drops in between applications and S3-compatible storage with no code changes required.
- Data security that outlasts a breach: Stolen data stays unusable even when cloud infrastructure or S3 storage credentials are compromised.
- No key to find, ever: Keys are ephemeral. There's no persistent key material anywhere an attacker, now or years from now, could find.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (Arm) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c7g.large Recommended | $5.50 |
Dimensions summary
You pay by the hour for this appliance running on a c7g.large ARM instance. This is the single pricing option on Marketplace, billed based on how long the instance runs. There are no separate tiers or add-ons to select here, and no per-gigabyte data charges. You launch the appliance in your own VPC and it processes data through a standard S3 API. Your hourly cost tracks the runtime of the c7g.large instance you deploy.
Top-of-mind questions for buyers
You get the Data Neutralization Appliance running on one c7g.large ARM instance. It sits between your applications and S3-compatible storage, encrypting and decrypting data through a standard S3 API. It splits files into frames, encrypts each with in-memory keys, and writes ciphertext to storage. No code changes are required.
You are charged per hour the c7g.large instance runs. A fully stopped instance does not accrue software charges, though underlying AWS storage fees may still apply. There is no per-gigabyte metering, so your data volume does not change the software cost. The rate tracks runtime only.
The hourly charge covers the appliance running on the c7g.large instance, with no separate per-gigabyte or bandwidth line items. The appliance handles encryption and decryption in the data path for data stored in S3-compatible storage. Your bill reflects instance runtime, not the amount of data processed.
www.hyperspheretech.com+1
Helpful?
Vendor refund policy
Refund requests are reviewed on a case-by-case basis. Customers may request a refund within 30 days of purchase for material product issues, deployment failures, or billing errors. Refunds are not provided for change of mind, unsupported environments, or partially used subscription periods. HyperSphere will make reasonable efforts to resolve technical issues prior to approving any refund.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (Arm) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
This release adds native AWS Marketplace entitlement and metered-billing support, including signed entitlements, protected-data limits, and subscription lifecycle handling. It also strengthens Marketplace node communications and adds automated secure initialization for AWS deployments.
Additional details
Usage instructions
HyperSphere DNA deploys as a single virtual machine instance inside your cloud environment. It acts as an S3 compatible encryption proxy: your application writes to HyperSphere DNA using standard S3 API calls, and every object is encrypted with before being stored in your own object storage bucket. No plaintext ever leaves the node. No encryption key is ever persisted.
Full documentation, deployment guides: https://www.hyperspheretech.com/docs/HyperSphere_DNA_for_AWS_Deployment_Guide.pdf
Support
Vendor support
Support portal: https://support.hyperspheretech.com/ Support email: support@hyperspheretech.com , 8x5
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Make stolen data useless. With HyperSphere DNA™ for AWS, compromised S3 credentials alone do not result in data exposure, and data exfiltrated from S3-compatible object storage remains unreadable by human or machine.
Cisco DNA Center Virtual Appliance extends Cisco's industry leading on-premise network controller and network management solution. The virtual form factor allows for a geo-distributable architecture, rapid and agile deployment, and optimized IT spending.
HyperSphere DNA™ is a centralized management console for HyperSphere DNA deployments. Deploy alongside two or more DNA nodes to manage vaults, access credentials, monitoring dashboards, and audit logs across your entire encryption fleet from a single interface.
Sphere's Document Intelligence professional services offering helps organizations design and implement AI-powered document processing solutions on AWS. Solutions can incorporate services such as Amazon Textract, Amazon Bedrock, Amazon S3, and Amazon OpenSearch Service to extract, classify, structure, search, and operationalize information from contracts, invoices, reports, forms, and other business documents.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.