rvexiumCryptographic Audit
Key strength analysis, cipher validation, entropy testing, and algorithm compliance verification against NIST and FIPS standards.
- Key Auditor
- Entropy Analyser
- Cipher Validator
Precision Tools.
Built for Security
Engineers.
Orvexium develops purpose-built security instruments — from cryptographic audit utilities and key validation engines to license enforcement debuggers and API security testing frameworks. Every tool is engineered to surface real vulnerabilities and validate real controls.
Zero External Dependencies
Air-Gap Compatible
FIPS 140-2 Aligned
Audit Log Compliant
Security Tool Categories
Six operational categories covering every phase of the security engineering lifecycle — from pre-deployment cryptographic assessment to post-incident forensic analysis.
License Enforcement
Validation engine testing, license key format analysis, expiry enforcement debugging, and multi-seat allocation verification tools.
- LVE Debugger
- Key Format Validator
- Seat Tracker
API Security Testing
Endpoint fuzzing, authentication bypass detection, rate-limit validation, JWT analysis, and OWASP API Top-10 compliance scanning.
- API Fuzzer
- JWT Analyser
- Auth Bypass Detector
TLS / Transport Security
Certificate chain validation, TLS 1.3 configuration auditing, cipher suite ranking, HSTS policy checking, and mTLS enforcement testing.
- TLS Scanner
- Cert Auditor
- mTLS Tester
HSM Integration
Hardware Security Module connectivity testing, PKCS#11 interface verification, key ceremony audit tooling, and secure enclave validation.
- HSM Tester
- PKCS#11 Validator
- Key Ceremony Tool
Forensic Analysis
Post-incident cryptographic artefact extraction, tamper-evidence verification, key compromise analysis, and forensic chain-of-custody tooling.
- Artefact Extractor
- Tamper Detector
- Chain-of-Custody
Core Security Tools
TOOL-01
Cryptographic Audit
Cryptographic Key Auditor (CKA)
Deep inspection of symmetric and asymmetric key material — analysing bit strength, entropy quality, derivation chain validity, and compliance with NIST SP 800-131A transition guidance. Supports RSA, ECC, AES, and post-quantum key formats including CRYSTALS-Kyber and CRYSTALS-Dilithium.
- RSA / ECC / AES key strength profiling
- NIST SP 800-131A transition audit
- Post-quantum algorithm key inspection (FIPS 203–206)
- Key rotation compliance timeline generation
- Hardware vs. software key origin verification
TOOL-02
License Enforcement
License Validation Engine Debugger (LVE-D)
End-to-end testing harness for the Orvexium License Validation Engine — simulating activation, renewal, seat allocation, expiry enforcement, and revocation flows without touching production systems. Identifies configuration gaps before deployment.
- License key format syntax & checksum validation
- Multi-seat allocation boundary testing
- Grace period and expiry enforcement simulation
- Revocation propagation latency measurement
- Offline mode validation timeout testing
TOOL-03
API Security
API Security Testing Suite (ASTS)
Automated OWASP API Security Top-10 scanner with authentication bypass detection, JWT validation testing, rate-limit boundary analysis, and mass-assignment vulnerability discovery. Generates structured SARIF-compatible reports.
- OWASP API Top-10 automated scanning
- JWT algorithm confusion & weak secret detection
- Rate-limit bypass and enumeration testing
- Broken object-level authorisation (BOLA) detection
- SARIF / JSON report export for CI/CD integration
Integration Capabilities
CI/CD Pipeline
GitHub Actions, GitLab CI, Jenkins, and Bitbucket Pipelines integration. SARIF output for GitHub Advanced Security and Defect Dojo ingestion.
SIEM Integration
Structured JSON and CEF log output for Splunk, IBM QRadar, Microsoft Sentinel, and Elastic SIEM ingestion pipelines.
REST API
Programmatic tool invocation via authenticated REST endpoints — trigger scans, retrieve results, and manage tool configuration without UI interaction.