Public-key verification
Your SDK ships with the public half, which can verify licences but cannot create one.
Key security
Protect the key that makes every licence trustworthy.
Your application receives only a public key. DYCRYPT protects the private signing key and uses modern algorithms and certificate options to produce licences your application can verify.
Modern algorithms
Paid plans support Ed25519, RSA 2048/3072/4096, and EC P-256/P-384 signing.
Flexible key formats
Use a raw public key, a self-signed X.509 certificate, a keystore, or supported PKCS#11 hardware.
Protected signing boundary
Signing is isolated from everyday product and licence management so private key material stays inside the protected signing path.
Controlled access
Use passkeys, team roles, and scoped API tokens to limit who can manage products and issue licences.
Fail-closed SDKs
Unsupported formats, wrong products, bad signatures, and machine mismatches return an invalid result instead of being guessed at.
DYCRYPT Sovereign
Bring DYCRYPT into your security perimeter.
Run the platform in your own environment when policy, residency, or key-custody requirements make SaaS unsuitable.
Hardware-backed signing
Sovereign can sign through your HSM or PKCS#11 token. The private key remains on the device while DYCRYPT requests signatures through the protected signing boundary.
Explore DYCRYPT Sovereign →Choose your deployment
Start in SaaS. Move on-premises when your requirements call for it.
Your application integration remains centred on the same signed licences and SDK behavior.