Now
SST-Citadel
Organizational credential vault. Viewer and Editor on a Vendors collection. Versions, audit, Tunnel when there is no public IP. First host on a box you hold, or SST-hosted. Quote, not a checkout.
The vault →Deploy. Secure. Scale.
Software that stays on your side of the wall.
Sigma Shield Technologies builds operator software for secrets, signing, isolated AI, remote assist, and short-notice cutover. We install it on a box you hold. We walk out. You do not get a zip of the source.
Selling now · vault
White-glove on-prem
Entra ID + MFA
No public IP required
What you can buy this quarter
Not eight products. One first host. The rest of the family attaches after that box is standing.
The installer
Sigma Hermes
SST-held installer. One intake. Rehearsal on a laptop. Live only with operator CLIs and a Charter grant. Customers do not install Hermes.
See Hermes →How you pay
Founding Operator
Paid architecture hour. Paid rehearsal. Written first-host on your box. We do not tour a fake public demo.
Book the hour →How we build
Identity, devices, secrets, and immutable backups before a product hostname. The brochure is not a product host.
Your side of the wall
On-prem products run on infrastructure you hold. Cloudflare Tunnel is the default edge when there is no public IP.
Identity you already trust
Microsoft 365 / Entra ID and MFA. We do not invent a second directory for a login screen.
White-glove, then walk-out
SST installs, binds a Charter grant to that instance, and leaves. You get a running system and support — not a git clone.
Honest limits
High availability is not unbreakable. A shared database stays a single point of failure until the architecture changes. Docs say so.