Sovereign Document Intelligence Platform
46 PDF tools plus a dual-scanner forensics platform. PDF scanner: 44 engines — 15 static heuristics, 6 live sandboxes (Ghostscript, MuPDF, Poppler, PDFium, LibreOffice, pdf.js), 3 ML classifiers with SHAP explainability, 6.4M+ offline threat indicators, MITRE ATT&CK mapping, 9 sanitization modes, local Qwen 2.5 AI forensic reports, zero retention. Office scanner: 23 engines covering Word, Excel, PowerPoint, Outlook, Access, and Visio — VBA macros, XLM deobfuscation, OLE forensics, IOC extraction, sandboxed execution, 4-mode sanitization. ML-KEM-1024 post-quantum encryption on every transfer.
PHP 8.4
Python ML
44+23 Engines
6.4M+ IOCs
MITRE ATT&CK
Zero-Retention
ML-KEM-1024
Post-Quantum Cryptography API Platform
Production API serving all finalized NIST post-quantum standards — ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205) — plus 44 additional hybrid and legacy schemes, 47 algorithms total. Not a wrapper: native implementations. HTTP/3 QUIC. Enterprise JWT auth. Real-time threat intelligence dashboard, bot remediation, public security dashboard, automated dependency scanning. The same cryptography securing PQ PDF and this site.
47 PQC Algorithms
FIPS 203/204/205
HTTP/3 + QUIC
NIST Native
JWT Enterprise
TLS 1.3
Rust HTTP/3 Reverse Proxy with Hybrid PQC TLS
From-scratch Rust Layer-7 reverse proxy: HTTP/1.1, HTTP/2, HTTP/3, QUIC, and WebTransport with hybrid X25519+ML-KEM-768 post-quantum TLS (NIST Level 3) via OpenSSL 3.5+. 222 commits. 142 passing tests. Serving stlweb.dev right now. 6 load-balancing algorithms, canary routing with auto-rollback, JA3/JA4 fingerprinting with replay and drift detection, WAF (SQLi/XSS/SSRF/traversal + 40+ scanner probe paths), 0-RTT replay protection, PQC session tickets, GeoIP blocking, ACME hot-reload, OCSP stapling, Prometheus metrics, OpenTelemetry tracing, zero-trust startup mode.
Rust
HTTP/3 + QUIC
WebTransport
X25519+ML-KEM-768
222 Commits
142 Tests
6 LB Algos
WAF + JA3/JA4
The First WebTransport Speed Test on the Internet
Every other speed test runs over TCP. This one uses real UDP datagrams over WebTransport/QUIC — measuring network conditions the way latency-sensitive applications actually experience them. Two servers (US East · US Midwest) with GeoIP auto-selection. Download: 12 concurrent QUIC streams. Upload: 16 WebTransport streams. Measures latency, jitter (σ RTT), packet loss, and throughput, then layers gaming experience rating, VoIP MOS score, streaming quality, buffer bloat analysis, ISP fingerprint, MTR hop visualization, and live percentile ranking vs real users. Free, no account.
First WebTransport Speedtest
Real UDP · Not TCP
WebTransport API
QUIC Datagrams
VoIP MOS Score
MTR Hop Viz
2 Servers
Free
Dual-KEM Zero-Knowledge Encrypted Messages
Every message independently encrypted under two NIST Level 5 algorithms simultaneously: ML-KEM-1024 (lattice, FIPS 203) and HQC-256 (code-based, NIST 2025). An attacker must break both — two entirely different mathematical problems — at the same time. The only encrypted-message tool implementing dual-KEM. True zero-knowledge: the AES-256-GCM wrap key lives only in the URL fragment, never transmitted. Burn-after-reading, passphrase layer (PBKDF2 200k iterations), 4 KB block padding, SHA-256 preview hash fingerprint, link health check, integrity badge, self-audit mode. No account. No data retained.
ML-KEM-1024 + HQC-256
Dual-KEM
NIST Level 5
Zero-Knowledge
Burn-After-Reading
Passphrase Layer
No Account
Universal PQ Wire Format — Submitted to NIST
An algorithm-agnostic binary serialization format for post-quantum cryptographic data, submitted to NIST for standardization consideration. The problem it solves: every PQ library serializes keys and signatures differently, breaking interoperability. pqc-binary-format gives any implementation a common wire format without vendor lock-in. 47 supported algorithms. 5 language bindings: Rust, Python, JavaScript, Go, and C.
NIST Submitted
47 Algorithms
5 Language Bindings
Rust · Python · JS · Go · C
Open Source
Wire Format