← All audiences

Security Engineer

Eliminate single points of failure in enterprise signing.

Use cases for this audience

HSM Replacement

Replace a single-key HSM with T-of-N distributed signing. No single party can sign alone; compromising T-1 parties does not compromise the key.

Threshold CA Signing

Operate a certificate authority where the root key is split across multiple parties. Issue certifies requires T-of-N quorum.

Automated Key Rotation

Run Herzberg share refresh on a schedule so that compromising the same T parties over time still does not reveal the key.

Sovereign PKI

Operate a national or industry PKI where the root of trust is held by a quorum of institutional parties rather than a single operator.

Policy Enforcement

Define attribute-based policies that signing sessions must satisfy (geography, role, time-of-day).

MPC DKG

Run distributed key generation across N parties so that no party ever holds the full key.

Threshold Custody

Custody digital assets under T-of-N quorum control. Withdrawals require threshold sign-off.