sst_citadel · selling
SST-Citadel
Vendor and internal credentials. Viewer / Editor / Admin. Password versions and an activity log. HA nodes from the UI against shared PostgreSQL — the database remains the SPOF.
Citadel page →The family
One company. One honesty rule.
Products below are named so a buyer can point. First invoice is still Citadel on a box you own. The others attach after that host, or stay SST-held.
On-prem under white-glove
SST installs, binds a Charter grant, walks out. Catalog items Hermes will stand when the grant and the box exist.
sst_hermes · installer
Sigma Hermes
Short-notice deployer. One intake. Azure, GCP, AWS, existing SSH, or local Docker. Rehearsal is the default. Live apply is SST-gated Command. Sealed report; secrets stripped.
sst_signet
Sigma Signet
PDF mark, PAdES-B sign, validate. Saves to the mailbox you already have — OneDrive or Drive — not a Signet content cloud. Demo CA is not a public root.
sst_alembic
Sigma Alembic
Distill living infra into a capture pack (import-only) and a replay pack for a second environment. Coverage is a score. Secrets redacted from the sealed Codex.
sst_janus
Sigma Janus
On-prem → Azure / GCP / AWS crossing. Preflight, operator-gated migrate, post-validate. Does not replace Azure Migrate or AWS MGN. Does not flip DNS.
sst_ira · argus host
Sigma Argus
Self-hosted remote assist. Two-node cluster on a shared database, health-gated watchdog. Shared DB is the remaining SPOF. We write that in the quote.
sst_merlon · appliance
Sigma Merlon
Perimeter box. nftables data plane. Guard / Watch / Seal. Signed generations, integrity watchdog, operator lifeline. Not DPI. Not TLS intercept. Not a first-call SKU.
sst_helios
Sigma Helios
Isolated AI access. Entra + MFA. Separate engines for Excel, boards, financials, general help, and IT fix — zero data sharing across them. Not a public model.
sst_halo · office bubble
Sigma Halo
Staff attach to your nodes — HO, plant, staging VPC. Seats + registered nodes. Not a consumer privacy VPN. Signaling stays SST-held.
SST-held planes
These do not ship to a customer as an install. They are how SST issues grants and runs work we will not hand over.
sst_charter · operator only
Sigma Charter
License office. Mints, validates, revokes. Term starts at generation, not paste. Keep is still $0 and still needs a code. Customers never install Charter.
sst_aegis
Sigma Aegis
Authorized assessment platform. Black / grey / white-box with an evidence pack. Not the vault. Not a first-host product. Control plane stays with SST.