Decent Edge
Infrastructure, built to perform.
A modular family of infrastructure products — hypervisor, operations, security, storage, and compute — each solving one concern, designed to compose.
The product family.
Each one stands alone. Pair them when it makes sense.
Secured Hypervisor
A hypervisor that audits itself.
Infrastructure Automation
Fleet operations on autopilot.
Adaptive Security Guard
Continuous security, around the clock.
Secure Remote Access
Browser-native access to your fleet, with full audit.
WebAuthn Authentication
Passwordless sign-in and task approval — no OTPs, no shared secrets.
Zero-Knowledge Storage
Encrypted backups we cannot read.
Application Marketplace
Extensions and verified third-party apps.
Environment Preparation and Execution Rig
Compliance you can run on demand.
Local Trust Agent
A goal-directed agent that acts across the stack, attested at every step.
SSH Knock Gate
Admin access that opens when you do, and closes when you stop.
Content Delivery
Content that arrives where it belongs, signed and on time.
Lightweight Application Server
A lightweight application server with two compute modes and a signed receipt per call.
The runtime, in numbers.
Same workload. Two execution modes. Signed results you can verify independently.
KVM-isolated execution
Each actor boots directly as a KVM guest — a flat binary with no operating system inside, isolated at the hardware level. The result is Ed25519-signed before it leaves the host. You can verify the receipt offline.
- 200 µs warm dispatch (reference voting workload, measured in a KVM virtual machine)
- Hardware-attested receipt per call
- Snapshot hot-pool — no cold start penalty
Distributed microservice mesh
The same actor source deployed as a supervised cluster on Firecracker microVMs. Scales horizontally across hosts. HATP receipts on every call — same attestation model, different execution target.
- isolated sandboxes
- Horizontal scale, same code
- Strong-consistency replication available
Environment validation rig
DE:EPER runs the full validation pyramid — from install checks to whole-stack scenarios — on every release. The output is signed evidence the auditor can verify byte-for-byte against the recipe. Compliance becomes something the pipeline produces.
- Automated test pyramid, install to whole-stack
- Signed evidence per run
- Auditor-verifiable, offline
The exact same source code. Different deployment target. You choose which fits your workload. Read the DE:LIGHT docs → See the benchmarks →
DE:PLOY and DE:FENDER work together — operations and security in one loop. Incidents are contained and remediated by the platform, and every action lands in the audit trail.
You're informed. You're not paged.
Evidence, not assurances.
DE:LIGHT runs on hardware-attested execution — a HATP receipt chains from silicon to runtime — mapped article by article against EU AI Act, NIS2, DORA, GDPR, CRA, and the EU Data Act.
Security, without the theatre.
Quick to deploy, and built so that even we cannot access your systems without your approval.