Solutions / By industry
Air-gapped, sovereign licensing and protection
Deploy licensing and application protection inside classified, disconnected or sovereign environments — with no outbound network at any point.
The challenge
Government and defense systems frequently run air-gapped, in sovereign clouds, or on accredited networks with no path to the public internet. Any dependency that must call out to a vendor service is disqualifying, and the software itself must resist adversary reverse-engineering.
Procurement also demands control and traceability: who can issue what, on which systems, with a defensible audit trail — and often the ability to run under your own brand.
How Delta1 Labs helps
A layered approach
Zero phone-home
Keyright verifies its own license and your customers’ licenses offline against embedded keys, and meters disconnected machines with signed credit blocks. Nothing needs to leave the enclave.
Run it anywhere
Self-host on your own hardware or a sovereign cloud — Docker, Kubernetes or Windows — fully air-gapped, with images moved in via a saved tarball.
Harden the binaries
Nebula.NET protects deployed software against static and dynamic analysis by capable adversaries.
Capabilities
What you get
- Fully air-gapped operation
- No outbound network at runtime.
- Offline license & credit verification
- Embedded-key verification, signed credit blocks.
- Sovereign / on-prem deployment
- Your hardware, your region, your accreditation.
- Method virtualization & anti-tamper
- Resist adversary reverse-engineering.
- Audit log
- Traceable issuance and administration.
- White-label
- Operate the console under your own brand.
Built with
Outcomes
- Runs with no path to the public internet.
- Deployed software resists adversary analysis.
- Full control and traceability of issuance.
- Sovereign, on your hardware and in your region.
Frequently asked
Questions, answered
Can it run with no internet at all?
Yes. Everything — your own license and your customers’ — verifies offline against embedded keys, and credits for disconnected machines use signed blocks. You move the image in on media and run it.
Can we brand the console as our own?
Yes — white-label of the dashboard and portal is available in the Enterprise self-hosted edition.
Let's talk about your setup
Tell us what you're building — we'll help you protect, license and ship it, managed or self-hosted.