Privafy CarrierEdge is a Security-as-a-Service platform designed for telecommunications carriers and Internet service providers to deliver managed security services to their subscribers. The solution operates at the network edge without requiring client-side hardware or software installation. The platform provides data-in-motion encryption and security services that activate when subscribers enable the service on their devices. CarrierEdge implements a privacy architecture where customers retain control of their encryption keys, preventing carriers from accessing customer data as it passes through the network. This design eliminates the need for carriers to store or protect customer data at rest. The system can be deployed in two configurations: on bare-metal Intel x86-based servers in private carrier clouds with 10 Gbps redundant connections, or as a service on hyperscale edge clouds including AWS and Microsoft Azure with auto-scaling capabilities. CarrierEdge includes firewall capabilities, intrusion detection and prevention, DDoS protection, anti-phishing, web filtering, and content inspection. Additional features include IoT device security, parental controls, IP and location masking, automated key rotation, AI-enhanced data loss prevention, and traffic management controls. The platform supports integration with existing SIEM and SOAR systems through log and network data imports.