diff --git a/_layouts/company.html b/_layouts/company.html index 653bea9..1fe58be 100644 --- a/_layouts/company.html +++ b/_layouts/company.html @@ -87,17 +87,14 @@ -
-
-

ready to take security seriously?

-

We help organizations that can't afford to fail. If security is mission-critical for your company, let's talk.

-
- Get in touch -
+
+

ready to take your security to the next level?

+

We help organizations that can't afford to fail. If security is mission-critical for your company, let's talk.

+
+ Work with us
- {%- include footer.html -%}
diff --git a/_layouts/landing.html b/_layouts/landing.html index edeb54d..db71ee5 100644 --- a/_layouts/landing.html +++ b/_layouts/landing.html @@ -56,7 +56,7 @@
-
+
what we do
@@ -88,13 +88,12 @@
-
-
-

ready to take security seriously?

-

We help organizations that can't afford to fail. If security is mission-critical for your company, let's talk.

-
- Work with us -
+ +
+

ready to take your security to the next level?

+

We help organizations that can't afford to fail. If security is mission-critical for your company, let's talk.

+
+ Work with us
diff --git a/_layouts/roadmap.html b/_layouts/roadmap.html index 0727126..3a37e12 100644 --- a/_layouts/roadmap.html +++ b/_layouts/roadmap.html @@ -59,229 +59,209 @@
-
-

SourceId

 +
+
SourceId
+
 | 
+
source code integrity
+
backlog
-
Problem statement
-

How does one verify that they are building from the source code they intend? What if someone tampered with code that goes into a .tar archive, or pre-compiled a blob of code and included it in the source code (ref to xz backdoor)

+

SourceId ensures that source code integrity is verifiable. It prevents tampering of archives and other formats used for delivering source code by standardizing code and generating a hash-based fingerprint of the tree which includes all essential files.


-
Solution
-

Standardize code to remove all version control system specific items, leaving only functionality related code and produce a hash based on the tree of all necessary files.

-
- + Learn more →
-
-
-

SigRev

 +
+
SigRev
+
 | 
+
crowdsourced code review
+
backlog
- -
Problem statement
-

There is a lot of code to review, so instead of manually reviewing all code, we rely on static analysis tools which are prone to missing novel exploits.

+

SigRev is a crowdsourcing framework for signed code reviews. It enhances open-source security by making comprehensive manual reviews discoverable, overcoming the limitations of static analysis tools.


-
Solution
-

Create a crowdsourcing framework which makes it easy to publish signed review of code

-
- + Learn more →
-
-
-

StageX

 +
+
StageX
+
 | 
+
deterministic reproducibility
+
ready
- -
Problem statement
-

How does one solve the "Reflections on Trusting Trust" (ref) problem?

+

StageX is a build toolchain which provides minimalist, reproducible, and multi-signed OCI images for popular software. Bootstrapped fully from source (Stage 0), it ensures your builds are hermetic, deterministic, and reproducible.


-
Solution
-

Bootstrap a compiler in a detrministic manner, then use that compiler to build all packages, reproduce the work on different systems, and cryptoraphically sign resulting hashes.

-
- + Learn more →
-
-
-

ReprOS

 +
+
ReprOS
+
 | 
+
ephemeral build environments
+
+
+
in-progress
+
+
+

ReprOS is a bare-bones unikernel OS designed for maximal isolation and reproducibility. Each build is executed in a temporary VM that is discarded afterward, eliminating persistent risks.

+
+ + Learn more + → + +
+
+
+ +
+
+
+
+
+
Keyfork
+
 | 
+
deterministic key management
+
+
+
ready
+
+
+

Keyfork simplifies cryptographic material management by deriving for different cryptographic algorithms from a single entropy source. This eliminates manual key handling complexity while maintaining security.

+
+ + Learn more + → + +
+
+
+ + +
+
+
+
+
+
Icepick
+
 | 
+
cryptographic operations
+
+
+
ready
+
+
+

Icepick provides a framework for cryptographic operations while preserving memory boundaries. It enables secure and efficient crypto transactions, including transfers and staking, in a platform-agnostic way.

+
+ + Learn more + → + +
+
+
+ +
+
+
+
+
+
AirgapOS
+
 | 
+
air-gapped OS
+
+
+
ready
+
+
+

AirgapOS is a minimal, deterministic Linux unikernel built for secure offline operations. It reduces the attack surface for managing sensitive secrets in an air-gapped environment.

+
+ + Learn more + → + +
+
+
+ +
+
+
+
+
+
Bootproof
+
 | 
+
remote attestation
+
+
+
backlog
+
+
+

Bootproof cryptographically attests that a server is running the software it claims to be running by leveraging TPM2.

+
+ + Learn more + → + +
+
+
+ +
+
+
+
+
+
EnclaveOS
+
 | 
+
trusted execution environments
+
in-progress
- -
Problem statement
-

How does one create a maximally isolated environment that's ephermeral and allows easy reproduction of software?

+

EnclaveOS is a minimal, immutable, and deterministic Linux unikernel tailored for Trusted Execution Environments (TEEs). It enables high-security, verifiable computing for sensitive workloads.


-
Solution
-

Create a bare-bones uni-kernel operating system which spins up a new VM for each build, and discards everything afterwards

-
- + Learn more →
- -
-
- -
-
- -
-
-

Keyfork

 -
-
ready
-
-
-
Problem statement
-

Managing cryptographic material can be unwieldy and TODO

-
-
Solution
-

Create a tool for using a single source of entropy to derive all cryptographic algorithms required

-
- - Learn more - → - -
- -
-
- -
-
- -
-
-

Icepick

 -
-
ready
-
-
-
Problem statement
-

How does one perform cryptographic operations in an agnostic fashion while preserving memory boundaries?

-
-
Solution
-

A framework for rapidly developing applications to perform transfer and staking cryptocurrency operations.

-
- - Learn more - → - -
- -
-
- -
-
- -
-
-

AirgapOS

 -
-
ready
-
-
-
Problem statement
-

How does one minimize the surface area for attacks when performing operations in an air-gapped setting?

-
-
Solution
-

A minimal deterministic unikernel Linux distribution designed for managing secrets offline.

-
- - Learn more - → - -
- -
-
- -
-
- -
-
-

Bootproof

 -
-
backlog
-
-
-
Problem statement
-

It's difficult to prove that server is running software it claims to

-
-
Solution
-

Leverage TPM2 to cryptoraphically attest to software that's running on a server

-
- - Learn more - → - -
- -
-
- -
-
- -
-
-

EnclaveOS

 -
-
in-progress
-
-
-
Problem statement
-

Creating immutable, deterministic images for use in secure enclaves is challenging

-
-
Solution
-

A minimal, immutable, and deterministic Linux unikernel build system targeting various Trusted Execution Environments for use cases that require high security and accountability.

-
- - Learn more - → - -
-
@@ -325,6 +305,7 @@

ready to take your security to the next level?

+

We help organizations that can't afford to fail. If security is mission-critical for your company, let's talk.

Work with us
diff --git a/_layouts/services.html b/_layouts/services.html index 96f9fbd..ce399ab 100644 --- a/_layouts/services.html +++ b/_layouts/services.html @@ -115,13 +115,11 @@
-
-
-

ready to take your security to the next level?

-

Schedule a complimentary introductory call to explore how Distrust can help secure your organization. Learn how we approach security, discuss your challenges, and see if we’re the right fit to work together.

-
- Work with us -
+
+

ready to take your security to the next level?

+

We help organizations that can't afford to fail. If security is mission-critical for your company, let's talk.

+
+ Work with us
diff --git a/_sass/base.scss b/_sass/base.scss index d363689..18d784e 100644 --- a/_sass/base.scss +++ b/_sass/base.scss @@ -157,9 +157,6 @@ a:hover { border: 1px solid var(--light-purple); } -.roadmap-card:hover { - border: 1px solid var(--light-teal); -} @mixin capsule { font-weight: 400; @@ -201,15 +198,45 @@ a:hover { .roadmap-header { display: flex; - justify-content: left; + justify-content: space-between; margin-bottom: 20px; } + .roadmap-header-capsule { display: flex; vertical-align: center; margin-left: 20px; } +.roadmap-title-container { + display: flex; +} + +.roadmap-card:hover { + border: 1px solid var(--light-teal); +} + +.roadmap-item-name { + color: white !important; + font-size: 40px !important; + font-weight: 600; +} + +.roadmap-tagline-line { + font-size: 30px !important; + line-height: 2.2; + color: var(--light-grey) !important; +} + +.roadmap-tagline { + font-size: 40px !important; + color: var(--light-grey) !important; +} + +.roadmap p { + max-width: 700px; +} + .narrow-list > li > p { margin-top: 0px; } @@ -254,7 +281,7 @@ a:hover { .vertical-line-container { position: absolute; - top: 1980px; + top: 2050px; right: 200px; width: 60px; height: 3550px; @@ -300,13 +327,6 @@ a:hover { max-width: 1000px; min-height: 360px; transition: transform 0.7s ease, background-color 0.3s ease; - filter: brightness(50%); -} -.roadmap .flex-container .flex-container-inner .text-well:hover { - background: #1e1e1e; - transform: scale(1.01); - filter: unset; - cursor: pointer; } .roadmap .flex-container .flex-container-inner .text-well:hover .learn-more { @@ -1579,5 +1599,8 @@ pre { line-height: 50px !important; } + .roadmap-header { + flex-direction: column; + } }