Now Live — Post-Quantum Secure

Universal Trust for the AI Agent Economy

Post-quantum cryptographic identity, verifiable credentials, and trust scoring for AI agents and humans. Quantum-resistant from day one.

12 products · 854+ tests · 60 docs pages · Apache 2.0

ML-DSA-65|ML-KEM-768|AES-256-GCM|SHA3-256

Two Existential Challenges

The AI agent economy is growing exponentially, but trust infrastructure hasn't kept up.

The Agent Trust Gap

AI agents are making decisions, spending money, and accessing sensitive systems — but they have no verifiable identity, no auditable trail, and no way to prove they're authorized. The current approach of API keys and bearer tokens was designed for humans, not autonomous agents.

The Quantum Threat

Quantum computers will break RSA and ECC within this decade. Every digital signature, every TLS handshake, every identity system built on classical cryptography is on a countdown timer. The time to migrate to post-quantum cryptography is now — not after Q-Day.

Twelve Products, One Platform

Everything you need to build trust into AI agent systems — from identity to compliance.

Identity

ML-DSA (Dilithium) based DIDs with W3C DID Core compliance. Quantum-resistant from day one.

Gateway

FastAPI sidecar with policy engine, identity verification, rate limiting, and audit middleware.

Ledger

Hash-chained append-only trust ledger with SHA3-256 integrity and Merkle tree inclusion proofs.

Credentials

W3C Verifiable Credential issuance, presentation, and verification with PQC signatures.

ADR

Agent Detection & Response. Real-time behavioral monitoring, anomaly scoring, and quarantine.

Skill ID

Content-addressable tool fingerprinting to prevent slopsquatting and verify skill integrity.

AARTS

AI Agent Runtime Trust & Safety. Deny-by-default enforcement with skill verification gates.

Beacon

PQC-signed threat intelligence sharing across federated organizations in real time.

RWA Governance

Cross-border tokenized asset governance with multi-jurisdictional compliance and hash-chained audit.

Federation

Cross-organization trust resolution with configurable trust modes and DID discovery.

Console

Full management dashboard for identity, policy, audit, ledger, federation, and all modules.

Policy Engine

RBAC with pattern matching, dry-run testing, role bindings, and hot-reload for trust policies.

Built for the Future

Every feature designed for quantum-resistant, cross-organization trust.

Post-Quantum Crypto

ML-DSA-44/65/87 signing, ML-KEM key exchange. NIST-standardized algorithms.

Merkle Proofs

SHA3-256 inclusion proofs for any ledger entry. Tamper-evident and verifiable.

W3C Verifiable Credentials

Issue, hold, present, and verify credentials per W3C standard.

Cross-Org Federation

Resolve DIDs and compute trust across organizational boundaries.

Behavioral Monitoring

Real-time anomaly detection, risk scoring, and automated quarantine for rogue agents.

Runtime Safety (AARTS)

Deny-by-default agent access control with skill verification gates.

Skill Fingerprinting

Content-addressable tool IDs prevent slopsquatting and verify skill integrity.

Threat Intelligence

PQC-signed beacon alerts shared across federated organizations in real time.

RWA Governance

Cross-border tokenized asset compliance with multi-jurisdictional rule evaluation.

Policy Engine

RBAC with pattern matching, dry-run testing, role bindings, and hot-reload.

Audit Chain

SHA3-256 hash-chained tamper-proof logging with Merkle proof verification.

Trust Scoring

Weighted scores with time decay, configurable saturation, and history tracking.

Framework Integrations

LangChain, Claude SDK, AutoGen, and CrewAI adapters out of the box.

CLI & SDK

Full Python SDK, Typer CLI, and FastAPI gateway. pip install ready.

Tier-Based Billing

API key management, usage metering, and 14-day free trial built in.

Architecture

8 layers. Fully modular. Auditable at every level.

Agent Layer
TrustAgentCredentialsLangChainClaude SDK
Crypto Layer
ML-DSAML-KEMAES-256-GCMHKDFHybrid
Identity Layer
DIDsDocumentsRegistryResolverKeystore
Trust Layer
LedgerMerkle ProofsTrust ScoringFederation
Security Layer
ADRAARTSSkill IDBeacon
Policy & Audit
Policy EngineRBACAudit ChainBilling
Governance
RWA TokenizationJurisdictionsCompliance
Gateway
Console APIMiddlewareRate LimitingSessionsTransport

NIST Post-Quantum Security Levels

Choose your security level. All algorithms are NIST-standardized (FIPS 203/204).

LevelSigningKey ExchangeClassical EquivalentUse Case
2ML-DSA-44ML-KEM-512AES-128Standard operations
3ML-DSA-65ML-KEM-768AES-192Default — recommendedDefault
5ML-DSA-87ML-KEM-1024AES-256Maximum security

Developer-First

pip install trusthub-sdk — and you're building with PQC.

from trusthub import TrustAgent

# Create an agent with post-quantum identity
alice = TrustAgent.create(
    org="acme",
    entity_type="agent",
    security_level=3  # ML-DSA-65
)

print(f"DID: {alice.did}")
print(f"Algorithm: ML-DSA-65")

Simple, Transparent Pricing

Start free. Scale as you grow. 14-day Pro trial included.

Community

Free

Open-source SDK for individual developers

  • Full Python SDK & CLI
  • 25 DIDs
  • 1,000 API requests/day
  • Trust Ledger
  • Audit Chain
  • Apache 2.0 License
Get Started

Pro

$99/mo

For teams building production AI agent systems

  • Everything in Community
  • 500 DIDs, 50K requests/day
  • Federation Support
  • ADR (Threat Detection)
  • AARTS (Runtime Safety)
  • Beacon (Threat Intel)
  • Skill ID Verification
  • RWA Governance (14-day trial)
  • Audit Export
  • 14-day free trial
Start Free Trial

Enterprise

Custom

For organizations with advanced security needs

  • Everything in Pro
  • 10,000 DIDs, 500K req/day
  • 50 Organizations
  • Priority Support
  • On-Premise Deployment
  • Custom Integrations
  • Compliance Reports
  • Volume Licensing
Contact Sales

Start Building with Trust Hub

Trust Hub is live. Install the SDK, spin up the gateway, and ship quantum-safe trust today.