Post-quantum by default
Every file is wrapped with ML-KEM-768 hybridized with KAZ-KEM-256, and signatures span ML-DSA and KAZ-Sign. Classical computers can't read it, and neither can the ones that come next.
Post-quantum · Zero-knowledge · Passkey-first
File sharing that stays private
when the computers get smarter.
FailSulit encrypts every document on your device with post-quantum cryptography before it leaves. The server stores ciphertext it cannot read — not now, not when better computers arrive.
- Client-side keys — the server never holds what matters
- NIST post-quantum algorithms (ML-KEM / ML-DSA) plus hybrid PQC
- Tamper-evident audit trail for every key and file event
Built for documents worth stealing
Deal rooms, case files, evidence, research. If a leak ends a career or a company, the sharing platform should be engineered as if the server will one day be seized.
Zero-knowledge storage
Encryption happens on your device. The server stores ciphertext, wrapped keys, and nothing else — a full database dump reveals documents to no one.
Passkey-first identity
Sign-in runs on your own self-hosted identity provider with passkeys and mandatory MFA for privileged roles. No passwords for phishers to harvest.
Tamper-evident audit
Key events, file events, and security decisions are recorded in a hash-chained audit trail — an artifact your auditors can check, not a promise.
Multi-device, safely
Pair a new device by QR with a 128-bit one-time secret and verified key fingerprints — or fall back to a passphrase with enforced strength floors. Revoke a device and its keys die with it.
Recovery without a backdoor
Lost devices are recoverable through a 2-of-3 trustee scheme with anti-abuse controls — and no server-held master key, ever.
A security model you can read
We publish what the server can and cannot do, because security teams should never have to take that on faith.
The server stores
- Ciphertext it cannot decrypt
- Public keys and wrapped key blobs
- Metadata: names, sizes, audit events
The server cannot
- Decrypt any document
- Mint or recover your private keys
- Silently grant itself file access
Honest boundaries: an attacker who compromises an unlocked device can read what that user can read, and document metadata is visible to the server. Our published threat model states this plainly — residual risk belongs in the open, not in the fine print.
See it before your next deal does.
FailSulit is in private beta with security teams and professional services firms. Tell us what you protect and we'll walk you through the threat model — including what we can't do yet.