The third adaptive hybrid system

Protection does not stop at the device.

Citadel coordinates protected routing, DNS, containment, privacy-safe evidence, endpoint controls, and optional two-hop separation across one governed Internet journey.

Explore the system See what gets verified

Standalone or integrated
Client + server
One-hop or two-hop

A luminous information path moving through a sequence of Citadel protection boundaries and two gateway nodes

Journey viewRepresentative architecture

One tunnel.Multiple coordinated defenses.

Current truth.Not a decorative “connected” badge.

Bounded claims.Every capability carries its evidence state.

One protection fabric

Adaptive by design.
Honest by operation.

Citadel changes form without changing its responsibility: protect the approved journey, report what is actually happening, and avoid silently interrupting desired traffic.

Current / validated scope POC / under qualification V2 / standby

Standalone or integrated

Use Citadel as its own protection client or embed the governed protection boundary inside an application.

Android, Linux, Windows

One product family with platform-specific artifacts and qualification states—not one-size-fits-all claims.

Client and server defenses

Endpoint consent, route truth, gateway enforcement, continuity, and evidence work as separate observable responsibilities.

One-gateway or two-hop

Start with direct protected egress or select ingress/egress separation when the approved service tier requires it.

The system in one view

One dominant idea.
Details when you ask for them.

The architecture remains available to technical buyers without forcing every customer to decode it before understanding the benefit.

Citadel shown across standalone and integrated deployment, three operating systems, client and server controls, and one-gateway or two-hop routing

Feature focus

Three ideas.
Eighteen seconds.

Short, human explanations of how Citadel approaches the protected journey. Each film is a campaign explainer—not a substitute for current operational evidence.

ADDR · 06 sec

Resolve deeper in the protected path.

“ADDR resolves destinations deeper in the protected path.”

Maya · Virtual Support Reception

Two-Hop · 06 sec

Separate the network view.

“Two hops reduce what one ordinary network position can reconstruct.”

Valeria · Virtual Governance Manager

Device Assurance · 06 sec

Grade trust from evidence.

“Device trust should be graded from evidence, not assumed.”

Valeria · Virtual Governance Manager

Selected from the completed Citadel feature-focus campaign. Playback is visitor-controlled; no video autoplays.

Protection that proves itself

“Running” is not the same as protected.

Citadel separates the signals that security products too often collapse into one reassuring icon.

Configured

The customer requested protection and an approved configuration exists.

Interface

The protected network interface is present.

Handshake

The peer exchange is current—not stale.

Traffic

Receive and transmit counters prove useful movement.

DNS

Resolution follows the approved protected path.

Egress

The public exit matches the selected route class.

A customer-facing dashboard is part of the product direction. Any displayed measurements must be identified as real evidence, representative data, or demonstration data.

Current operational evidence

Current defense posture.

A concise live status is shown here. The complete evidence surface and independent connection tests have their own page.

DEFSTAT—

Current defense posture

UNKNOWN

Current defense posture cannot be established.

0/10rings reporting

View live statistics and connection tests

Route architecture

Choose the journey—not the jargon.

CoreOne-gateway

DeviceIngress + egressInternet

Protected transit and public-IP masking through one registered Citadel gateway.

Premium architectureTwo-hop separation

DeviceIngressEgressInternet

Separates customer-facing ingress from destination-facing egress, reducing what an ordinary single-position observer can reconstruct.

Two-hop separation does not erase identity supplied to a destination, defeat authenticated accounts or cookies, or promise legal untraceability.

Citadel defense sequence

Ten rings. Ten honest states.

Evidence status is assigned by ring. Citadel’s ten-ring architecture should not be described as wholly deployed, universally qualified, or independently certified.