entityOS Security
The public internet is treated as hostile. Access to entityOS is earned in layers — from network-level allowlisting, to per-connection cryptographic identity, to self-sovereign trust. This is the index to every entityOS security guide, tool and reference.
The Model
Network access is a privilege, not a right. Each stage narrows who can reach entityOS — and proves, with progressively stronger evidence, that they are who they claim to be.
IP allowlisting at the network edge. Only known addresses can even reach the door.
Mutual TLS with X.509 identity. Every connection proves itself cryptographically.
Full zero trust. Never trust, always verify — end to end, request by request.
The Staged Architecture
The backbone of entityOS security. Each stage is a self-contained guide you can adopt on its own, or layer together for defence in depth.
Control who can even reach your services. Restrict access to known fixed IP addresses at the network edge before a single packet is processed.
Explore the stageProve who is connecting, not just where from. Mutual TLS binds every connection to a client certificate you issued.
Explore the stageNever trust, always verify — at every hop. No implicit trust anywhere in the path, whatever the source or prior authentication.
Explore the stageThe Case
The reasoning behind the architecture — the moment that forced it, the mindset it demands, and the solution it points to.
AI has collapsed the cost of attack. The open internet, built on implicit trust, can no longer hold — so it must become closed.
Read the essay Essay · 02Network access is a privilege, not a right. How reframing access changes every downstream security decision you make.
Read the essay Essay · 03Close the internet, open up to AI. Neutralise the threat and seize the opportunity in the same architectural move.
Read the essayBuild & Operate
From production deployment to the console controls a space administrator uses day to day.
Running on entityOS.cloud when the platform is the business: the staged closed-internet model — IP allowlisting, mTLS and self-sovereign identity — as continuity controls that keep the platform reachable only by you.
Read the plan DeploymentHow entityOS deploys IP allowlisting and mutual TLS in production — the factory pattern, the edge, and how the pieces fit.
Read the guide Decision guideAn IT guide to the two options: when network-layer allowlisting is enough, and when to reach for per-connection certificate identity.
Read the guide Implementation guideImplementing Stage 2 with one certificate per gateway, not per device — office and hosted gateway models, the design boundary that protects the certificate, and a seven-step rollout.
Read the guide CompanionA simple way to reach sensitive systems from a known fixed IP — via a dedicated-IP VPN or an isolated cloud workstation.
Read the guide ConsoleA space administrator guide to restricting access by IP address in the entityOS console — for the whole space and per user.
Read the guide ExplainerA plain-language explainer for organisations using entityOS.cloud: what IP allowlisting actually protects, what it doesn’t, and how it fits into organisational continuity.
Read the explainer ExplainerA manager’s guide to the network and application security layers: Sentinel decides which devices may reach you, sign-in confirms which person is using them — two independent layers an attacker must beat separately.
Read the explainerIdentity & Cryptography
Authentication that removes the shared secret, and cryptography built to outlast the quantum threat.
TOTP kept the code at home; passkeys remove the shared secret entirely. WebAuthn binds a cryptographic identity to the real site.
Read the guide AuthenticationWhy one-time logon codes over SMS and email travel across systems you don’t control — and what that means for your risk.
Read the guide CryptographyThe harvest-now-decrypt-later threat, and how the closed-internet architecture shrinks the surface and moves toward NIST FIPS 203/204/205.
Read the guide TransportAn HTTP-free, mutually-authenticated data channel to entityOS.cloud: KERI direct mode over one TCP port, CESR framing, ACDC payloads.
Read the referenceTools
In-browser OpenPGP utilities. Nothing is uploaded — save the page and run it with the network off.
Generate a key pair, sign a message, and verify a signature entirely in your browser. No network, no upload.
Open the tool Runs offlineEncrypt a message to a recipient’s public key, in the browser, offline. Paste in a key or load the published ibCom key.
Open the toolAnalysis & References
Where the argument meets the record — real incidents, executive briefings and conference references that ground the architecture.
When autonomous agents formed a collective. Reading the 2026 OpenAI / Hugging Face compromise against the closed-internet thesis.
Read the analysis Incident analysisIn the Hugging Face compromise, no channel broke — legitimate pipes carried hostile meaning. Why content authenticity is the missing layer.
Read the analysis Threat analysisWhy a network-layer allowlist blunts zero-day exploitation — an unknown vulnerability is far less useful to an attacker who can never reach the vulnerable service in the first place.
Read the analysis Executive briefingA concise entityOS response to ASD / ACSC and Five Eyes guidance on advanced AI cyber security threats.
Read the briefing Regulatory signalCISC’s stronger enforcement posture under the SOCI Act — infringement notices from 2026–27, the 28 September CIRMP report, and what it means for regulated customers and their suppliers.
Read the signal ConferenceWhen the agents got out. A reference briefing on containing autonomous agents, tied to Black Hat USA 2026.
Read the reference Security signalFrontier-model capability is climbing steeply as models gain autonomous, long-running persistence. What the GPT-6 Astra vs GPT-5.6 Sol benchmarks mean for security — and why a staged, closed-internet model answers it.
Read the signalStandards & Compliance
The information-security, privacy, continuity, AI, quality, risk and cyber standards entityOS is built to — anchored on its ISO 27001 ISMS — and, for each one, how the platform meets it. Start with the Protection & Security library and the current certificates.
The externally-certified Information Security Management System behind entityOS — scope, risk, testing, cryptography and certificates, gathered into one library.
Explore protection CertifiedThe independently-assessed ISO/IEC 27001:2013 and 27017:2015 certificates for the entityOS cloud service — issued by Best Practice Certification (JAS-ANZ).
View the certificates AttestationA director’s attestation that entityOS still operates to its last ISO 27001/17 certificate, with recertification to the 2022/2026 editions by 30 November 2026.
Read the statement SOAEvery ISO/IEC 27001:2022 Annex A control and the four ISO/IEC 27017:2026 cloud controls, with our applicability decision, a live filter, and the one documented exclusion.
View the SOA SOC 2How entityOS’s ISO 27001/27017-certified controls map to the AICPA SOC 2 criteria, with the attestation status stated plainly.
View the mapping NIST CSFOur ISO 27001/27017-certified controls mapped across all six CSF 2.0 Functions — Govern, Identify, Protect, Detect, Respond, Recover.
View the mapping Essential 8Our ISO 27001-certified controls mapped to the ASD Essential Eight strategies, with self-assessed maturity across ML0–ML3.
View the mapping ReferenceISO 27002, 27017, 27701, 22301, 42001, 9001 and 31000, plus SOC 2, NIST CSF and the ASD Essential Eight — each with its focus and how it relates to ISO 27001.
Explore the standards DetailHow entityOS meets each standard — the platform mechanisms, from the ISMS and staged closed-internet access to KERI/ACDC identity and the Continuity engine.
See how it compliesProgram & Notices
Find a way through the closed internet — IP allowlisting, mutual TLS or self-sovereign identity — report it in good faith, and earn a reward scaled to impact.
View the programThe entityOS emergency security response notice and Stage 1 IP-based network protection — partner notice and authority agreement.
Read the noticeA concise entityOS response to ASD / ACSC and Five Eyes guidance on advanced AI cyber security threats — how the staged, closed-internet model answers it.
Read the briefingNew to this? Start with The Moment for the why, then Stage 01 for the first control you can turn on today. Building on entityOS? Jump to Implementation.