Applied cryptography,
since 2017.
An independent practice in Paris. We do design-level security work for organizations that ship cryptography: protocol architecture, primitive selection, threat modeling, and formal verification.
Symbolic Software was founded in 2017 by Dr. Nadim Kobeissi in Paris, on one thesis: security has to start at the design level, with the protocol architecture, the cryptographic choices, and the threat model. Everything downstream is a consequence of those decisions.
That focus has held across more than 250 engagements with organizations including 1Password, Mozilla, Zoom, Coinbase, Bitwarden, and the Linux Foundation. We audit at the layer above implementation, which AI bug-finders do not reach. We also publish open-source tools that came out of our own audit work: Verifpal for protocol verification, Crucible for post-quantum conformance testing, the Post-Quantum Migration Playbook for engineers planning migrations.
Since 2025 we have also been teaching: a free university-level Applied Cryptography course offered to 50 students at Lebanese universities each summer, and the Cedarcrypt summer school and research conference run with the IACR. The mission is the one we started with in 2017: make applied cryptography insights accessible to industry.
Company information.
Privacy policy.
We collect nothing by default. This website keeps aggregate, cookieless page-view counts on infrastructure we operate ourselves: no personal data, no fingerprinting, no way to identify you. The only exception is an online service of ours that needs minimal data to function, and that you have chosen to use.
No information is ever shared with third parties under any circumstances, or used beyond the functionality you specifically consented to. If you have a question about what data a particular service of ours touches, write to [email protected] and we will tell you exactly.