← Home
// Product family

Trust and identity

Protecting endpoints, systems and identities. TrustID and its editions, content verification and local system defence.

TrustID v3Production

Local identity and endpoint security.

TrustID v3 combines behavioural signals, system checks, a trust score and responses defined by the operator’s policy. Processing takes place on the protected endpoint.

  • Windows architecture with eleven detection layers.
  • CCD engine with eight specialised agents and case memory.
  • Local collection, correlation and decisions.
› Technical details
The v3 documentation describes the Windows architecture. A Linux variant has documentation and a local package; deployment qualification remains to be established. Response times, MITRE coverage and cryptographic guarantees must be tied to the selected edition and profile. Production status does not replace acceptance testing on the client endpoint.
TrustID v1.5Production

Layered protection with a local trust score.

The Windows v1.5 edition correlates endpoint signals and applies responses according to its rules. It is presented separately from v3 and does not include v3’s CCD engine.

  • Weighted trust scoring.
  • Local monitoring and responses.
  • Rules matched to the deployment profile.
› Technical details
An external review dated 27 February 2026 documents a 72-hour adversarial exercise and a risk analysis, with weaknesses retained in the restricted report. No aggregate score or universal coverage guarantee is inferred from that exercise. v3 capabilities are not attributed to v1.5.
TrustID HospitalPOC

The hospital edition of the TrustID v3 engine.

TrustID Hospital brings a healthcare layer to the TrustID Core v3 engine: DICOM and RIS signals, clinical identities, role-based access control, medical behaviour patterns and a signed audit chain. Processing stays on the institution’s infrastructure.

  • Detection of abnormal patient-record access, bulk exports and unjustified break-glass access.
  • Hybrid RSA-4096 and ML-DSA-65 audit signatures; AES-256-GCM encryption at rest.
  • No outbound traffic in the default configuration; PACS, RIS, directory and SIEM connectors are enabled by the institution.
› Technical details
Signed build 3.0.0; a data inventory was established by the publisher from the source code in August 2026 as a pre-audit. The integration test simulates three profiles and detects the three expected anomalies; it is not an acceptance test on real data. In the pilot profile, any insecure fallback refuses to start. The independent audit and the pilot on patient data remain to be carried out; no public repository is published for this edition.
Elyne VerifyPrototype

Checking whether content is authentic, directly on the phone.

Elyne Verify is a fully local Android content-verification app: a dedicated detector scores AI-generated images and videos, and an embedded multimodal model explains the verdict in plain language. “Send to Elyne” works from other applications through sharing.

  • ONNX detector and arm64 Gemma engine run on the device, with no data sent out.
  • Credibility analysis of news articles is announced, not delivered.
  • Born from TrustID’s mobile strand, refocused on verification.
› Technical details
MVP in progress: image checks, links and sharing. Targets arm64-v8a with a native runtime; ONNX and GGUF models are provisioned in the application’s storage. No public distribution, and no measurement of the detector on an independent dataset, is published at this stage.
Elyne CyberProduction

Local defence alongside agentic control.

Elyne Cyber observes system signals, checks them against its policy and applies bounded responses. Models can assist analysis; action authorisation remains deterministic. The service is distinct from EAS Defense.

  • Local collection and correlation.
  • Responses defined by operator rules.
  • TrustID signals when that integration is configured.
› Technical details
P0-05 on R10 observed Cyber remaining active after EAS stopped; it was not replayed on R45. R36B documents targeted denial of access to EAS secrets under the tested identity. These observations establish neither universal resistance to host compromise nor Cyber Red or Hybrid results.
Elyne Cyber RedTraining

Prepare SOC and CERT teams for adversarial scenarios.

Cyber Red provides real attack scenarios within an authorised laboratory. It helps exercise defence teams and observe the tested environment’s responses.

  • Real actions within a defined scope.
  • Exercises for SOC and CERT teams.
  • Effect observation and outcome review.
› Technical details
Cyber Red belongs to the Elyne Cyber family. It is distinct from Red Unified, the platform supplied with EAS. Scenarios, stop procedures and restoration must be defined for the laboratory; defensive Cyber results do not qualify this variant.
Elyne Cyber HybridTraining

An exercise adversary combining attack and defence.

Cyber Hybrid is the training variant combining offensive and defensive behaviour. It targets response exercises: blocking, containment and regaining the initiative in an authorised environment.

  • Offensive and defensive behaviour in one exercise.
  • Laboratory scope agreed with the operator.
  • Outcomes assessed for each scenario.
› Technical details
A distinct Cyber-family variant. Scope must be established for each exercise; the public documentation publishes no Hybrid-specific qualification. Guarantees or measurements from defensive Cyber and Red Unified are not transferred to it.

Let’s discuss your project.

Contact us