Security
An overview of how Fystack protects private keys, data, and infrastructure at every layer, from encryption at rest to deployment hardening.
Encryption at Rest
How Fystack protects private keys, seeds, and secrets by encrypting every asset at rest with AES-256-GCM and layered key management.
Data Tampering Detection
How Fystack detects database tampering with Ed25519 signatures, SHA-256 hashing, and automated verification to keep wallet data trustworthy.
In Memory Runtime encryption
How Fystack protects sensitive credentials in memory using guarded buffers, zeroization, and runtime policies to prevent memory-based attacks.
Secret Store & KMS Integration
How Fystack integrates with enterprise-grade secret stores and key management systems to securely manage credentials and signing keys.
MPC Wallet Security
How Fystack implements Multi-Party Computation (MPC) wallet security with threshold signatures, distributed key generation, and secure signing.
Supply Chain Security
How Fystack verifies dependencies, build artifacts, and deployment pipelines to prevent supply chain attacks.
Container Security & Build Provenance
How Fystack ensures verifiable, tamper-resistant container builds through SLSA-compliant provenance and keyless cryptographic signing.
Deployment Best Practices
How Fystack implements secure deployment practices with private network isolation, strict IAM controls, and endpoint detection.