Nubeva SKI

Nubeva SKI (Session Key Intercept) is a TLS decryption solution that extracts session keys directly from the memory of servers or clients during the TLS handshake process. The technology uses patented sensors that intercept keys as they are created in real-time, enabling decryption of encrypted traffic without requiring modifications to applications, authentication processes, or PKI infrastructure. SKI Sensors are deployed as small software components available in multiple formats including C libraries for embedding into applications and agents, standalone agents, or containers across various operating systems and platforms. The sensors operate in read-only mode and extract session keys before the handshake completes, then export them through multiple methods such as writing to files, piping to local processes, or securely forwarding across networks. The solution supports various key handling options including direct transmission to decryption systems, storage in keystore databases or files, or temporary holding in key servers and containers that can filter, replicate, and distribute keys to authorized targets. Decryption can be performed using keylog files, modified decrypt engines, or Nubeva's Decrypt C Library and containers. The technology is designed for integration with security infrastructure including Secure Web Gateways, SASE systems, Application Performance Monitoring tools, Next-Generation Firewalls, IPS/IDS systems, NDR platforms, HIDS/HIPS solutions, sandbox environments, APT detection systems, Network Packet Brokers, PCAP stores, and 5G monitoring systems. Keys can be destroyed after decryption to maintain forward secrecy or archived for forensic purposes.