The back-end
you'd rather not build.
Focused back-end products for the work you keep rebuilding — security, realtime, metering, and discovery. Pick the one that fits.
One problem per product.
Each one lives on its own site with its own docs and pricing. Take whichever solves your problem.
Encrypt everything. Pick the engine that fits.
Secrets, keys, certificates, tokens, encrypted search, audit — nine engines with cryptographic isolation baked into the storage layer. One binary, one data plane.
- Per-tenant key isolation with AES-256-GCM out of the box
- JWT, secrets, KMS, CA, authZ, encrypted search, audit — unified
- Ship as one binary or split into specialized services
- Zero-trust on the wire, not just in policy
Real-time events that actually arrive.
Deliver realtime events without duct-taping Redis, a broker, and a retry queue together. Auth, presence, and chat engines come built in — your database stays the source of truth.
- Embedded WAL storage — skip Redis, skip the broker
- Swap chat, presence, and transport engines without forking
- Clients reconnect and replay up to 7 days without gaps
- Multi-tenant by default, protocol-agnostic
Catch revenue leaks before they reach the invoice.
Real-time metering, quota enforcement, and billing integration that runs in the request path. Catch overruns and undercharges before they land on a customer's bill.
- Atomic quota checks in the request path, not after the fact
- Flat, graduated, volume, package, and weighted pricing out of the box
- Swap billing providers freely — Stripe, Lago, or yours
- Two-phase reservations so order flows never oversell
Matching and discovery, without the ML team.
A multi-tenant social graph with matching, ranked feeds, and campaigns. Ship the product — skip the affinity models, cold-start heuristics, and consent plumbing.
- Warm and cold-start matching in a single pipeline
- Tune 35+ scoring parameters without shipping code
- Native CPM/CPE campaign engine with A/B variants
- Consent-aware embeddings ready for GDPR workflows
Rigor over surface area.
Every product does one thing correctly and tells the truth about what's under the hood.
One product. One problem. Done right.
Each product solves a single hard problem end-to-end. No general-purpose compromise tax, no features you have to work around.
Herald and ShrouDB run on your own boxes.
Keys and event data stay in your infra — both ship as a single binary. Meterd and Simbee are managed products.
You learn the limits before you ship.
Each product's docs spell out what it does well and what it deliberately doesn't. You shouldn't discover a constraint in production.
Pick one. Ignore the rest.
Each product has its own site, docs, pricing, and roadmap. There's no suite — adopting one doesn't commit you to the others.