Solutions
Defense and air-gapped
Disconnected sites cannot call home and cannot trust a vendor's cloud. The same platform is designed to run with no egress, on your metal, with keys only you hold.
Capabilities
Available means proven on our lab clusters as of 2026-10-24, not deployed for customers. In development is being built; Planned is designed, not built. We have no customers yet and hold no certification or authorization.
Built entirely from code and mirrored images
Status: Available. Our lab clusters pull every image through their own registry cache and are rebuilt from code.
Air-gapped delivery
Status: Planned. Packages moved across the gap with Zarf and Hauler into Harbor or zot on site.
Customer HSM or Shamir key custody
Status: In development. The assurance profile rejects any air-gapped profile that relies on our keys, a cloud KMS, a tunnel, or a public transparency log.
Hardware TPM attestation
Status: Planned. SPIRE tpm_devid against the TPM vendors you approve. The lab uses a software TPM.
CMMC and impact-level profiles
Status: Planned. Overlay profiles are design targets; none exist in OSCAL form yet, and we hold no CMMC or IL authorization.
We hold no certification or authorization; see the trust center for the current, generated control status.