logoTangleGate

Verifiable privileged access

TangleGateProve your privileged sessions weren't tampered with.

Identity-gated privileged access with tamper-evident session audit trails — independently verifiable without trusting the operator.

Request a technical evaluationHow it works

Private technical preview · Self-hostable · Built on IOTA

Don't just trust the system → verify the proof

  1. Identity

    DID

  2. Credential check

    VC / VP

  3. Terminal session

    Linux

  4. Session audit

    recorded history

  5. SHA-256 hash

    digest

  6. IOTA ledger

    anchor

    hash only

  7. Verification

    independent

Session content stays in your infrastructure. Only the digest of the actions audit document is anchored.

The problem

Recording a session is not the same as proving it.

Privileged session recordings usually live in a database controlled by the operator. That gives you an audit trail — but ultimately asks you to trust the system storing it.

TangleGate creates a cryptographic proof of the audit artifact so its integrity can be independently checked later.

Conventional

Trust that the stored recording is the original.

TangleGate

Verify the artifact against a hash anchored outside centralized control.

How it works

Authenticate → Access → Record → Notarize → Verify

Session content never leaves your infrastructure. Only the fingerprint of the performed acttions artifact is anchored publicly.

  1. 01

    Authenticate

    Prove your identity before privileged access is granted.

    Decentralized identity · Verifiable Credentials

  2. 02

    Access & Record

    Work normally in a Linux terminal while the privileged session is recorded.

    Terminal session · Sysadmin controls sessions termination

  3. 03

    Notarize

    Create a cryptographic fingerprint of the canonical session audit and anchor it to the IOTA ledger.

    IOTA

  4. 04

    Verify

    An auditor or external party can independently check whether the audit artifact matches the notarized hash.

    Independent verification

The proof chain
  1. 01

    Privileged terminal session

    operator side

  2. 02

    Canonical audit artifact

    deterministic document

  3. 03

    SHA-256

    fingerprint

  4. 04

    IOTA ledger

    public anchor

  5. 05

    Independent verifier

    auditor / third party

✓ MATCH

The audit artifact is identical to the one notarized at session time.

✕ MODIFIED

The artifact no longer matches the notarized hash and cannot be relied on.

Use cases

Where verifiable audit evidence matters.

  • Privileged Access Auditing

    Create defensible records of privileged operations on Linux infrastructure.

  • Linux Infrastructure Access

    Gate and record privileged terminal access without adopting a heavyweight PAM platform.

  • Independent Verification

    Allow auditors or external parties to verify that submitted audit evidence has not been altered.

  • Third-Party Access

    Control and record privileged access performed by contractors, vendors or other external operators.

Why TangleGate

Different architecture. Different trust model.

  • Verifiable

    Session integrity can be independently checked against a notarized cryptographic hash.

  • Identity-gated

    Privileged access starts only after a cryptographically verifiable identity credential is presented.

  • Self-hostable

    Run the system within your own infrastructure and keep session data and audit records under your control.

  • Technical transparency

    TangleGate is being developed as a technical product with explicit attention to verification, threat modeling and security hardening.

Alternatives

How TangleGate differs

One capability sets TangleGate apart across every category: session integrity that an outside party can verify without trusting whoever stores the log.

  • Commercial PAM / PASM

    Strength
    Mature platforms, broad integrations, high availability and enterprise tooling.
    TangleGate difference
    Independent session-integrity verification and a self-hostable architecture.
    Trade-off
    TangleGate is earlier-stage and has significantly less ecosystem and operational tooling.

  • Open-source bastions / session recorders

    Strength
    Lightweight SSH access and session recording.
    TangleGate difference
    Cryptographic tamper evidence, identity-gated access and independent verification.
    Trade-off
    Fewer deployment patterns and integrations today.

  • Centralized audit / SIEM

    Strength
    Scale, search, analytics and broad integrations.
    TangleGate difference
    Provides a cryptographic proof that can be verified independently of the log-store operator.
    Trade-off
    TangleGate is not a replacement for SIEM or log analytics.

  • Homegrown scripts / SSH logging

    Strength
    Flexible, inexpensive and customizable.
    TangleGate difference
    Provides an integrated access → recording → notarization → verification model.
    Trade-off
    Less freedom for highly bespoke workflows.

Status

Currently in technical preview

TangleGate is an early-stage security product under active development and hardening. We will soon start working with a small number of technical evaluators to validate the architecture, operational model and real-world use cases.

Become a design partner

Contact

Let's talk about your privileged-access problem.

We're looking for infrastructure, security and compliance teams interested in evaluating TangleGate and helping shape the product.

  • → Private technical preview, by evaluation
  • → Self-hostable deployment
  • → Linux privileged terminal sessions