Salt Lake City, Utah — June 3, 2026

Signal — the free, open-source encrypted messaging app widely regarded as the gold standard for private communications — is the closest thing the security world has to consensus. With 70 million active users and 220 million downloads, it's the default choice for government officials, journalists, lawyers, and executives who need messaging they can trust. Attackers know this.

Phishing campaigns, malicious linked devices, misconfigured user lists, and vulnerabilities in third-party software have all led to Signal data exposure in recent years, not because Signal's encryption is broken, but because the humans and systems around it aren't immune to mistakes. Once a message is fraudulently extracted from the platform, Signal's end-to-end encryption no longer protects it.

Cy4Data Labs, based in Salt Lake City, recently launched Cy4Signal to close that gap. The product is an extension of its Cy4Secure platform that wraps individual messages, voice, and video in an additional layer of encryption, one that travels with the data itself rather than residing in the surrounding infrastructure.

A Cy4Signal-protected message as it appears to an unauthorized recipient

The practical result: if an attacker does get their hands on a Signal message through social engineering or a third-party compromise, what they have is a cryptographic string. Not a conversation. The screenshot above shows exactly what that looks like in practice.

Christina Richmond, Founder & Principal Analyst, Richmond Advisory Group

"By extending past Signal's end-to-end encryption, technologies like Cy4Signal enable users to go the final mile and protect data once it's been fraudulently extracted from the platform," said Christina Richmond, Founder & Principal Analyst, Richmond Advisory Group

The timing is deliberate. Agentic AI has significantly amplified the scale and sophistication of social engineering attacks, making high-value communications channels a more attractive target than ever. Signal's open-source architecture, while generally well-audited, shares the same human-error vulnerabilities as any other platform with a large user base.

Todd Carper, CTO & Cofounder, Cy4Data Labs

"Signal remains as susceptible to social engineering as any other technology. Cy4Signal ensures that some of the world's most sensitive data stays safe from hostile governments and other bad actors," said Todd Carper, CTO & Cofounder, Cy4Data Labs

Cy4Signal is aimed specifically at government and enterprise users and organizations where a single leaked thread could have national security consequences. The encryption is described as mathematically resistant to current compute power and, notably, designed with post-quantum threat models in mind.

Cy4Signal is available now for government and industry customers. Cy4Data Labs is offering a data security stress test for organizations that want to see the protection in action.

Learn more about Cy4Data Labs at cy4datalabs.com.

At RSAC 2026, oconsidered "the superbowl of cybersecurity conferences," the Cy4Data Labs team handed out Guy Fawkes masks to conference attendees, a nod to the anonymous-identity themes at the heart of their product. Photo courtesy Cy4Data Labs, March 2026
Share this article
The link has been copied!