You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<title>ZeroAuth — Enterprise Authentication Where a Breach Exposes Nothing</title>
7
-
<metaname="description" content="ZeroAuth: Zero-knowledge proof authentication for enterprises. No passwords stored. No secrets transmitted. Nothing to steal." />
6
+
<title>ZeroAuth — Auth API powered by Pramaan™ zero-knowledge biometric IP</title>
7
+
<metaname="description" content="ZeroAuth is the developer-facing auth API built on Pramaan, the patented zero-knowledge biometric identity protocol (IN202311041001). Raw biometrics never leave the device. No secrets stored. No secrets on the wire." />
<ahref="#patents" class="powered-by" title="Pramaan is the patented zero-knowledge biometric identity protocol that ZeroAuth is built on (Indian Patent IN202311041001, granted to Yushu Excellence Technologies Pvt. Ltd.)">
945
+
<spanclass="powered-by-dot"></span>
946
+
Powered by Pramaan™
947
+
</a>
948
+
</div>
907
949
<divclass="nav-links">
908
950
<divclass="nav-center">
909
951
<ahref="#how">Product</a>
@@ -926,15 +968,16 @@
926
968
<divclass="hero-content">
927
969
<divclass="hero-badge">
928
970
<spanclass="hero-badge-indicator"></span>
929
-
Auth API for developers · v1 live on zeroauth.dev
971
+
Built on Pramaan™ · Indian Patent IN202311041001 (Granted)
930
972
</div>
931
973
<h1>
932
974
Authentication where a breach exposes <spanclass="em">nothing.</span><br/>
ZeroAuth is an auth API that replaces stored credentials with zero-knowledge proofs.
937
-
Ship signup, login, and device attestation in minutes — with no passwords in your database and no secrets on the wire.
978
+
ZeroAuth is the developer-facing auth API for <strongstyle="color:var(--text);font-weight:600;">Pramaan</strong> — the patented zero-knowledge biometric identity protocol from Yushu Excellence Technologies.
979
+
Raw biometrics never leave the device. Commitments & Groth16 proofs are all the server ever sees.
980
+
Ship signup, login, and device attestation in minutes.
938
981
</p>
939
982
<divclass="hero-actions">
940
983
<ahref="/dashboard/signup" class="btn-primary">Start building free</a>
@@ -974,7 +1017,7 @@ <h3>1. Get an API key</h3>
974
1017
</p>
975
1018
<h3style="margin-top:1.5rem;">2. Register a user</h3>
976
1019
<p>
977
-
POST a commitment from the client SDK. ZeroAuth stores the commitment — never the underlying secret.
1020
+
POST a Poseidon commitment from the client SDK. ZeroAuth stores the commitment — never the underlying biometric.
978
1021
</p>
979
1022
<h3style="margin-top:1.5rem;">3. Verify the proof</h3>
980
1023
<p>
@@ -1110,10 +1153,10 @@ <h3>Open source</h3>
1110
1153
<!-- HOW IT WORKS -->
1111
1154
<sectionclass="how-section" id="how">
1112
1155
<divclass="container">
1113
-
<divclass="section-label reveal">How It Works</div>
<h2class="section-title reveal">Three steps. Zero secrets exposed.</h2>
1115
1158
<pclass="section-desc reveal">
1116
-
ZeroAuth uses zero-knowledge proofs to let users prove their identity without ever revealing credentials — not to your servers, not to anyone.
1159
+
ZeroAuth implements the Pramaan protocol: the user proves they hold a biometric on their device, and only a Poseidon hash commitment + a Groth16 proof ever cross the network. Raw embeddings stay in browser/app memory and are GC’d after hashing.
1117
1160
</p>
1118
1161
<divclass="steps">
1119
1162
<divclass="step reveal">
@@ -1162,9 +1205,9 @@ <h3>Verify On-Chain or Off</h3>
1162
1205
<sectionclass="demo-section" id="demo">
1163
1206
<divclass="container">
1164
1207
<divclass="section-label reveal">Live Demo</div>
1165
-
<h2class="section-title reveal">See it in action — 60 seconds, zero secrets.</h2>
1208
+
<h2class="section-title reveal">See Pramaan in action — 60 seconds, zero secrets.</h2>
Watch a complete authentication flow: biometric scan, ZK proof generation, SSO access, and a simulated breach that exposes nothing.
1210
+
Watch a complete Pramaan flow through the ZeroAuth API: biometric capture, Poseidon commitment, Groth16 proof generation on-device, server-side verification, and a simulated breach that exposes nothing.
1168
1211
</p>
1169
1212
<divclass="demo-frame-wrap reveal">
1170
1213
<iframeclass="demo-iframe" src="/demo.html" title="ZeroAuth Live Demo" loading="lazy"></iframe>
@@ -1181,7 +1224,7 @@ <h2 class="section-title reveal">See it in action — 60 seconds, zero secrets.<
1181
1224
<divclass="section-label reveal">The Math</div>
1182
1225
<h2class="section-title reveal">What a breach actually costs.</h2>
1183
1226
<pclass="section-desc reveal">
1184
-
In 2023, Okta's breach exposed every support customer's data. Here is the same scenario with ZeroAuth.
1227
+
In 2023, Okta’s breach exposed every support customer’s data. In May 2024 an Indian Army contractor leaked 496 GB of biometric data. Here is the same scenario with Pramaan.
ZeroAuth's core cryptographic protocol is protected by granted and pending patents across multiple jurisdictions.
1311
+
Pramaan is the zero-knowledge biometric identity protocol behind every ZeroAuth verification — commitment hashing, Groth16 proof, on-chain anchoring on Base L2, and DDIL-grade offline verification. Granted to Yushu Excellence Technologies Pvt. Ltd. Read the full <ahref="#whitepaper" style="color:var(--blue);text-decoration:none;">technical whitepaper →</a>
The cryptographic foundations, architecture, and security proofs behind ZeroAuth.
1435
+
25 pages on the protocol that ZeroAuth implements: architecture, cryptographic design, security analysis against 9 attack vectors, performance benchmarks, and regulatory compliance posture.
Technical architecture & security analysis. Covers system design, registration + authentication + offline flows, Sybil/identity-binding model with LSH deduplication, Poseidon hash construction, Circom 2.1.9 circuit details, Groth16 proof system, on-chain anchoring on Base L2, threat analysis (server DB breach, device capture, MITM, replay, …), and a regulatory annex covering DPDP 2023, RBI Video-KYC, UIDAI independence, and GDPR.
1454
+
</p>
1397
1455
<divid="wpFormContainer">
1398
1456
<formclass="wp-form" id="wpForm">
1399
1457
<inputtype="email" id="wpEmail" placeholder="Enter your work email" required/>
1400
1458
<buttontype="submit">Download PDF</button>
1401
1459
</form>
1402
1460
</div>
1403
1461
<divclass="form-success" id="wpSuccess">
1404
-
<pstyle="color: var(--green); font-weight: 500; font-size: 0.8125rem;">Thanks — your download is starting. <aid="wpDownloadLink" href="/docs/whitepaper.pdf" download="ZeroAuth_Whitepaper.pdf" style="color: var(--blue); text-decoration: underline;">Click here</a> if it does not begin automatically.</p>
1462
+
<pstyle="color: var(--green); font-weight: 500; font-size: 0.8125rem;">Thanks — your download is starting. <aid="wpDownloadLink" href="/docs/whitepaper.pdf" download="Pramaan_Whitepaper.pdf" style="color: var(--blue); text-decoration: underline;">Click here</a> if it does not begin automatically.</p>
1405
1463
</div>
1406
1464
</div>
1407
1465
</div>
@@ -1421,7 +1479,7 @@ <h3>ZeroAuth: Zero-Knowledge Authentication for the Enterprise</h3>
1421
1479
</svg>
1422
1480
ZeroAuth
1423
1481
</div>
1424
-
<pclass="footer-tagline">Auth API where a breach exposes nothing. Built on zero-knowledge proofs.</p>
1482
+
<pclass="footer-tagline">Auth API where a breach exposes nothing. Built on the patented <strongstyle="color:var(--text-secondary);font-weight:600;">Pramaan™</strong>zero-knowledge biometric protocol.</p>
0 commit comments