Products / Host layer

ByteDesk Vault

free

Fleet identity for teams running gateways.

v0.3 · free for one gateway · self-host · MVP

An independently deployable identity directory for fleets of Gateway hosts: identities, TOTP and public-key credentials, enrollment tokens, and short-lived signed assertions. The gateway stays the enforcement point; Vault is the source of truth.

curl -fsSL https://get.bytedesk.ai/vault | bash

What it does

01

Identity directory

Identities, credential methods, profiles and grants, served from a single static binary with SQLite.

  • 02

    Gateway enrollment

    Mint single-use enroll tokens; gateways redeem them and switch to vault-backed auth with local break-glass.

  • 03

    Durable by design

    Sealed AEAD snapshots replicate to memory, GitHub, or your own store behind a circuit breaker.

  • 04

    Signed plugin installs

    Installs Store packages with ed25519 signature verification against the Store trust key.

Works with

Every edge is labeled with its real state. Nothing here implies an integration that does not exist yet.

Tiers

Free

$0

  • 1 enrolled gateway
  • All credential methods
  • Snapshot replicas
Install Vault

Teams

$5/gateway/month

  • Unlimited enrolled gateways
  • No minimum
  • Email support
Buy Vault Teams

Paid tiers bill through ByteDesk Store checkout · going live

Fleet identity for teams running gateways.

Free forever, self-hosted, no account required to start.