Boundary enforcementComing soon
Inspect documents at every ingress and make deterministic decisions.
A headless verifier and policy engine for email, upload portals, APIs, and file-transfer systems. The Gateway answers one question for every file: deliver, warn, quarantine, or reject - and emits a signed event to your SIEM.
- Deterministic allow / warn / quarantine / reject
- Drop-in HTTP inspection API
- Signed verdicts for SIEM and SOAR
POST /v1/inspect
{ "verdict": "QUARANTINE", "profile": "OSDF-GOV-RESTRICTED", "risk": "HIGH", "failures": [ "OSDF_MANIFEST_UNDECLARED_OBJECT", "OSDF_LEDGER_LOG_KEY_UNTRUSTED" ], "warnings": ["OSDF_REVOCATION_NOT_CHECKED"]}Capabilities
What Gateway does
Email ingestion
Microsoft 365, Google Workspace, Postfix milter, Exim, and ICAP.
API verification
POST bytes to /v1/inspect and receive a structured verdict.
Quarantine
Hold suspicious or unverifiable packages before they reach users.
Enforcement policies
Require signed issuers, trusted ledgers, freshness, and revocation checks.
Get started
The future of trusted documents
Bring cryptographic verification, verifiable provenance, and zero-trust access control to every document your organization creates and receives.