We practice what we preach. Every build is cryptographically signed, every dependency is tracked, and every claim is verifiable. Welcome to the receipts-first security model.
This page was built with cryptographically signed proofs. Verify it yourself.
SHA256:349b685e628d2894de982d238bd2b338f6aad29c5d25b7fc31bad9bcf3dc5627sha256:6a3f24dbe31f6b80c0ad8a25a9d5a36d51b96e2e35c5f8c1bd6a9edb0f4236beReplace the base URL if you are validating a preview environment. Both commands should output the values shown above.
export BASE_URL="https://railguard.ai"
node --input-type=module <<'VERIFY'
import { createPublicKey, verify } from "crypto"
const base = process.env.BASE_URL ?? "https://railguard.ai"
const attestation = await fetch(`${base}/.well-known/build-attestation.json`).then((res) => res.json())
const pubKey = await fetch(`${base}/.well-known/public-keys/railguard-build-ed25519.pub`).then((res) => res.text())
const { signature, ...unsigned } = attestation
const message = Buffer.from(JSON.stringify(unsigned))
const publicKey = createPublicKey(pubKey.trim())
const signatureBytes = Buffer.from(signature.signatureBase64, "base64")
console.debug("Verified:", verify(null, message, publicKey, signatureBytes))
VERIFYexport BASE_URL="https://railguard.ai"
curl -sS "$BASE_URL/.well-known/railguard-gateway-sbom.json" | openssl dgst -sha256
# Expected digest: sha256:6a3f24dbe31f6b80c0ad8a25a9d5a36d51b96e2e35c5f8c1bd6a9edb0f4236beAttestation and SBOM artifacts are available from /.well-known. Download everything at once via railguard-artifacts.zip or follow the verification guide for deeper instructions.
Every request is authenticated and authorized. No implicit trust, no exceptions. All access is logged with cryptographic receipts.
Every build, deployment, and security event is signed with Ed25519. Receipts are immutable, verifiable, and auditable.
Full SBOM (Software Bill of Materials) for every release. Continuous vulnerability scanning with automated remediation.
Every build is reproducible from source. Given the same inputs, you'll get byte-for-byte identical outputs.
Multiple layers of security controls. If one layer fails, others prevent compromise. Continuous monitoring and threat detection.
SOC 2 Type II, GDPR, and EU AI Act controls built into every layer. Compliance isn't an afterthought—it's the foundation.
Learn how to verify our build attestations and cryptographic signatures
View our complete dependency list and vulnerability reports
Security documentation, compliance reports, and penetration test results
Responsible disclosure: security@railguard.ai (PGP key available)