Self-hosted reverse proxy built on Caddy: proxy hosts, automatic HTTPS, TCP/UDP streams and traffic analytics, with an optional per-host WAF, sign-in and access rules.
Zero trust gateway for MCP servers. Aggregate, filter, and securely access MCP tools from anywhere without VPNs, open ports, or exposed endpoints. Built on OpenZiti, zrok, and Agora with cryptographic identity, mTLS, per-client isolation, and tool-level permission control.
DigPeer — the DIG Network peer client: DigPeer::connect(peer, tls) auto-handles direct-or-relay via dig-nat, typed RPC over dig-rpc-protocol, §5.4 recipient-sealed directed calls, and clean disconnect. The client mirror of dig-rpc's server.
Open source CLI agent for Localport. Single Go binary, zero dependencies. Exposes localhost to the internet over fast, secure tunnels (HTTP, TCP, TLS, mesh, mTLS).
Canonical DIG peer mTLS: the shipped public DigNetwork CA, per-peer node certs, rustls mutual-auth configs, peer_id = SHA256(SPKI DER), and the #1204 BLS-G1 cert binding.
Automatically register and generate AWS, GCP & Azure IAM roles, X.509 certificates and username/password pairs for Kubernetes pods using cert-manager, CNCF SPIRE or Otterize Cloud