Guardyn

The Privacy Rebellion Starts Now

"Your conversations are not a product. Your metadata is not for sale. Your privacy is not negotiable."

Cryptographically-verified, audit-ready, quantum-resistant secure communication platform. Built with X3DH, Double Ratchet, and OpenMLS protocols.

Designed for high-security communications with military-grade cryptography and audit-ready architecture.

🚀 Join Beta Testing View on GitHub

E2EE

Signal + OpenMLS

Quantum-Resistant

100%

Open Source

K8s

Cloud-Native

<150ms

Call Latency

Zero

Metadata Collection

Why Choose Guardyn?

Military-grade cryptography meets enterprise-grade infrastructure. Built by security engineers for the privacy-conscious era.

🔐

Unbreakable Cryptography

X3DH key exchange, Double Ratchet (Signal Protocol), OpenMLS for groups, and Kyber+ECDH hybrid for quantum resistance. Perfect Forward Secrecy guaranteed.

🛡️

Audit-Ready Transparency

Reproducible builds with Nix, SBOM generation, artifact signing with Cosign, TLA+ formal proofs, and independent security audits (Cure53, Symbolic Software).

🏗️

Enterprise Infrastructure

Rust backend, TiKV for distributed transactions, ScyllaDB for high-throughput storage, NATS JetStream for messaging, Kubernetes-native with triple redundancy.

⚡

High Performance

Message delivery <500ms, call setup <2s, voice latency <150ms, 1080p video at 30fps, 1000+ messages/sec throughput.

📱

True Cross-Platform

Flutter-powered clients for iOS, Android, Windows, macOS, Linux, and Web. One codebase, native performance everywhere.

📞

E2EE Voice & Video

WebRTC with SFrame encryption, Opus codec for audio, VP9/AV1 for video. First platform with E2EE live broadcasting (<2s latency).

👥

OpenMLS Group Chat

IETF-standard Messaging Layer Security for groups up to 1000 members. Cryptographic guarantees for group confidentiality and integrity.

🔒

Hardware-Backed Keys

Secure Enclave (iOS), StrongBox (Android), TPM (desktop) integration. Private keys never leave secure hardware.

🌐

Self-Hosted Option

Full data sovereignty with Community Edition (Apache-2.0). Deploy on your infrastructure with complete control.

Technology Stack

Modern, battle-tested technologies for maximum security and performance
💡 Click on any technology to learn more

🦀 Backend Services (Rust)

Rust (Memory-Safe) gRPC APIs Auth Service Messaging Service Media Service Presence Service Notification Service

💾 Data Layer

TiKV (Distributed Transactions) ScyllaDB (High-Throughput) NATS JetStream (Messaging) Redis (Caching) MinIO (Object Storage)

🔐 Cryptography

Signal Protocol (libsignal) OpenMLS (Groups) X3DH Key Exchange Double Ratchet Kyber (Post-Quantum) X25519 / Ed25519 AES-256-GCM SFrame (Media E2EE)

📱 Client Applications

Flutter 3.x Dart BLoC Pattern WebRTC Tauri (Desktop) WebAssembly

☸️ Infrastructure

Kubernetes (k3d/k3s) Kustomize Helm Charts Cilium CNI cert-manager SOPS + Age (Secrets)

📊 Observability

Prometheus Grafana Loki (Logging) Tempo (Tracing) OpenTelemetry

🔧 DevOps & Security

Nix Flakes (Reproducible Builds) GitHub Actions Cosign (Artifact Signing) Syft (SBOM) cargo-audit TLA+ Specifications ProVerif (Crypto Proofs)

Production-Grade Architecture

Kubernetes-native design with battle-tested components

🎯

Microservices Architecture

5 core services (Auth, Messaging, Media, Presence, Notifications) deployed across namespaces: platform, data, messaging, observability, apps.

🔄

Event-Driven Messaging

NATS JetStream streams (MESSAGES, PRESENCE, NOTIFICATIONS, MEDIA) with at-least-once delivery and configurable retention.

💪

Triple Redundancy

3-node clusters for TiKV, ScyllaDB, and NATS. Fault-tolerant with automatic failover and recovery.

📦

Kustomize Overlays

Environment-specific configs (local, prod) with base manifests. GitOps-ready for declarative infrastructure management.

🔑

Secrets Management

Age encryption with SOPS for all sensitive configs. Zero plaintext secrets in git, vault-backed for production.

🚀

CI/CD Pipeline

Automated builds with Nix, security scans (cargo-audit, clippy), integration tests on k3d, signed releases with Cosign.