Enterprise SaaS
Cloud-hosted · Cynest managed
- Moduvia control plane hosted and operated by Cynest
- Monitoring, patching, and runbooks under contract
- Same modules and I/O contracts as air-gap builds
- Support scoped per environment and SLA
Modular infrastructure platform · Cynest, Inc.
Infrastructure that fits together—cloud-hosted or air-gapped.
Moduvia turns private AI, DevOps, observability, Kubernetes, and security into documented modules. Same architecture in Cynest-managed SaaS or on an air-gapped rack with no outbound internet path.
deploy: saas | airgap
Dual-delivery model
One control plane. SaaS or air-gap.
Run it as Cynest-operated enterprise SaaS, or as a fully isolated on-prem install on Cynest-provided hardware. Need help fitting it to an enclave or connectivity limit? Consulting can scope that.
Air-gapped / on-prem
Isolated install · Cynest hardware
- Cynest provides the hardware for disconnected enclaves
- No outbound internet required
- Data stays local, including immutable storage patterns
- Support contracts available for sustainment and updates
Engineering services
Consulting · stack design
- Map modules to classified or CUI workflows
- Integrate against real inputs, outputs, and enclave boundaries
- Works for SaaS, air-gap, or a move between them
- Fixed statements of work—no public price list
Government & DoD compliance
Built for regulated and defense workloads.
Aimed at FedRAMP paths, CMMC 2.0, NIST SP 800-171, and DoD IL5/IL6 readiness. So authorizing officials can put these services in fabrics they already recognize.
Platform capabilities
Documented modules. Explicit contracts.
Every module lists what it takes in, what it puts out, where it runs, and what Cynest operates vs. what you keep. Integration stays written down—not tribal knowledge.
Repeatable package definitions
Versioned manifests instead of one-off diagrams. Ship the same artifact from lab to IL-bound production.
Open inputs / defined outputs
IdP, object storage, registries, networks—declared interfaces only. No hidden side channels.
SaaS ↔ air-gap parity
Same capabilities in Cynest cloud and on disconnected hardware. No forced dual architecture.
Clear operated boundary
What Cynest patches and monitors. What stays with your AO, ISSM, or platform team.
From selection to enclave placement.
Programs rarely fail on model choice alone. They fail on integration, crypto, and boundary decisions. Moduvia turns those decisions into modules you can run in FedRAMP-bound SaaS or on IL5/IL6-ready disconnected racks.
CryptoFIPS-validated modules for data at rest and in transit
AccessZero Trust identity + MFA to resource boundaries
NetworkAir-gap builds with no required outbound internet path
EvidenceControl mappings toward FedRAMP, CMMC 2.0, NIST 800-171
Solution catalog
Named modules under Moduvia.
Pick what the mission needs. Run it in SaaS or air-gap without rebuilding the stack.
Moduvia Privara
Private AI
Self-hosted models, chat, API access, and document search—private data stays inside your boundary.
Moduvia Deployr
DevOps pipeline
Repos, builds, registry, scanning, and deploy to approved targets.
Moduvia Tracepoint
Observability
Metrics, logs, traces, dashboards, and alerts for operators and the SOC.
Moduvia Grid
Kubernetes
Orchestration, scaling, persistent storage, and TLS where the workload runs.
Moduvia Guardrail
Security and compliance
Secrets, detection, scanning, policy, audit logs, and SIEM hooks.
Moduvia Percept
Intelligent surveillance
Coming soonMotion detection, live feeds, alerts, and clip retention for secured sites.
FAQ
Questions we get from engineers and program owners.
What is Moduvia?
Cynest’s modular infrastructure platform. Documented modules for private AI, DevOps, observability, Kubernetes, and security—with clear deploy targets.
Is Moduvia a separate company?
No. It’s a product of Cynest, Inc. Not a spin-off, and not a replacement for the Cynest brand.
How does dual delivery work?
Cynest-managed SaaS, or an air-gapped install on Cynest hardware. Consulting can design either path.
Which compliance frameworks are in scope?
FedRAMP, CMMC 2.0, NIST SP 800-171, and DoD IL5/IL6 readiness. FIPS crypto and Zero Trust controls on supported modes.
Which named solutions ship today?
Privara, Deployr, Tracepoint, Grid, and Guardrail. Percept (intelligent surveillance) is coming soon.
Can it run with no outbound internet?
Yes. Air-gap installs are built for disconnected enclaves. Support contracts are optional.
Tell Cynest how you need to run it.
SaaS, air-gap, IL placement, or a consulting scope to compose Privara, Deployr, Tracepoint, Grid, and Guardrail.