Security

A proof you can audit beats a score you have to believe.

Three documents — specific, and honest about what we don't solve: the attacks we defeat, how we classify TPMs, and every certificate authority we trust. Candor is the trust signal here, not adjectives.

Read in any order

Three documents, no fluff

Threat model

Twenty-five attacks against device attestation, with a clear table of which we defeat cryptographically, which we make capital-bound, and which we explicitly don't.

vTPM detection

How we classify TpmClass. The IBM swtpm vendor-ID quirk; AWS Nitro detection; Azure Hyper-V CA; Microsoft Pluton. Reproducible from public TPM 2.0 spec + vendor docs.

Trust anchors

Per-vendor counts of every embedded root and intermediate with the refresh timestamp, cited to Microsoft TrustedTpm.cab. Per-cert SHA-256 fingerprints render when the site is built against the live anchor manifest.