entityOS Security
The public internet is treated as hostile. Access to entityOS is earned in layers — from network-level allowlisting, to per-connection cryptographic identity, to self-sovereign trust. This is the index to every entityOS security guide, tool and reference.
The Model
Network access is a privilege, not a right. Each stage narrows who can reach entityOS — and proves, with progressively stronger evidence, that they are who they claim to be.
IP allowlisting at the network edge. Only known addresses can even reach the door.
Mutual TLS with X.509 identity. Every connection proves itself cryptographically.
Full zero trust. Never trust, always verify — end to end, request by request.
The Staged Architecture
The backbone of entityOS security. Each stage is a self-contained guide you can adopt on its own, or layer together for defence in depth.
Control who can even reach your services. Restrict access to known fixed IP addresses at the network edge before a single packet is processed.
Explore the stageProve who is connecting, not just where from. Mutual TLS binds every connection to a client certificate you issued.
Explore the stageNever trust, always verify — at every hop. No implicit trust anywhere in the path, whatever the source or prior authentication.
Explore the stageThe Case
The reasoning behind the architecture — the moment that forced it, the mindset it demands, and the solution it points to.
AI has collapsed the cost of attack. The open internet, built on implicit trust, can no longer hold — so it must become closed.
Read the essay Essay · 02Network access is a privilege, not a right. How reframing access changes every downstream security decision you make.
Read the essay Essay · 03Close the internet, open up to AI. Neutralise the threat and seize the opportunity in the same architectural move.
Read the essayBuild & Operate
From production deployment to the console controls a space administrator uses day to day.
Running on entityOS.cloud when the platform is the business: the staged closed-internet model — IP allowlisting, mTLS and self-sovereign identity — as continuity controls that keep the platform reachable only by you.
Read the plan DeploymentHow entityOS deploys IP allowlisting and mutual TLS in production — the factory pattern, the edge, and how the pieces fit.
Read the guide Decision guideAn IT guide to the two options: when network-layer allowlisting is enough, and when to reach for per-connection certificate identity.
Read the guide CompanionA simple way to reach sensitive systems from a known fixed IP — via a dedicated-IP VPN or an isolated cloud workstation.
Read the guide ConsoleA space administrator guide to restricting access by IP address in the entityOS console — for the whole space and per user.
Read the guideIdentity & Cryptography
Authentication that removes the shared secret, and cryptography built to outlast the quantum threat.
TOTP kept the code at home; passkeys remove the shared secret entirely. WebAuthn binds a cryptographic identity to the real site.
Read the guide AuthenticationWhy one-time logon codes over SMS and email travel across systems you don’t control — and what that means for your risk.
Read the guide CryptographyThe harvest-now-decrypt-later threat, and how the closed-internet architecture shrinks the surface and moves toward NIST FIPS 203/204/205.
Read the guide TransportAn HTTP-free, mutually-authenticated data channel to entityOS.cloud: KERI direct mode over one TCP port, CESR framing, ACDC payloads.
Read the referenceTools
In-browser OpenPGP utilities. Nothing is uploaded — save the page and run it with the network off.
Generate a key pair, sign a message, and verify a signature entirely in your browser. No network, no upload.
Open the tool Runs offlineEncrypt a message to a recipient’s public key, in the browser, offline. Paste in a key or load the published ibCom key.
Open the toolAnalysis & References
Where the argument meets the record — real incidents, executive briefings and conference references that ground the architecture.
When autonomous agents formed a collective. Reading the 2026 OpenAI / Hugging Face compromise against the closed-internet thesis.
Read the analysis Incident analysisIn the Hugging Face compromise, no channel broke — legitimate pipes carried hostile meaning. Why content authenticity is the missing layer.
Read the analysis Threat analysisWhy a network-layer allowlist blunts zero-day exploitation — an unknown vulnerability is far less useful to an attacker who can never reach the vulnerable service in the first place.
Read the analysis Executive briefingA concise entityOS response to ASD / ACSC and Five Eyes guidance on advanced AI cyber security threats.
Read the briefing ConferenceWhen the agents got out. A reference briefing on containing autonomous agents, tied to Black Hat USA 2026.
Read the reference Security signalFrontier-model capability is climbing steeply as models gain autonomous, long-running persistence. What the GPT-6 Astra vs GPT-5.6 Sol benchmarks mean for security — and why a staged, closed-internet model answers it.
Read the signalProgram & Notices
Find a way through the closed internet — IP allowlisting, mutual TLS or self-sovereign identity — report it in good faith, and earn a reward scaled to impact.
View the programThe entityOS emergency security response notice and Stage 1 IP-based network protection — partner notice and authority agreement.
Read the noticeA concise entityOS response to ASD / ACSC and Five Eyes guidance on advanced AI cyber security threats — how the staged, closed-internet model answers it.
Read the briefingNew to this? Start with The Moment for the why, then Stage 01 for the first control you can turn on today. Building on entityOS? Jump to Implementation.