enclave online · 0 passwords stored
Authentication that
reads like a log file,
not a login form.
Every session on ZeroPass is a verifiable trace: hardware attestation in, signed by a C++ engine, out as a scoped token. Watch it happen.
under the hood
Three processes. One trust boundary.
01 · GATEWAY
FastAPI
Terminates the request, rate-limits by IP, and forwards assertions over gRPC. Holds no keys.
02 · ENGINE
C++20 / OpenSSL
Verifies signature envelopes and scores device trust natively — no interpreted runtime in the hot path.
03 · SESSION
Postgres + Redis
Tokens are logged, rate-limited, and revocable. Every handshake leaves an auditable trace.
Nothing to remember. Everything to verify.
Deploy the protocol, or read every line of the engine that runs it.
Start Building