Skip to main content
IRON ID
Request a demo

IRON ID Platform

Early accessConçue en France
IRON ID KryptonVPN

Access by identity, device and resource. Not by a tunnel.

Secure access to your organization's infrastructure, where every hop is checked against the same identity and roles as the rest of the platform.

Request a demoJoin the waitlist

In plain words

The secure way for your people to reach your internal systems from anywhere, where access is given to one application at a time rather than to the whole network.

Like a VPN, except that it opens one door at a time instead of the whole building.

Why Krypton?

KryptonKr · atomic number 36

Krypton means hidden in Greek; it was found hiding in liquefied air. The hidden element names the product that hides your network behind a decision: who, from which device, to reach what.

Colour on this page: the pale, greenish white of krypton.

Who it is for

Distributed teams, contractors, private deployments.

What you do with it

  • Sign in
  • Reach one resource
  • Leave a sealed record

Early accessopen to the first cohorts by waitlist, before the launch on 20 November 2026

What is IRON ID Krypton?

The VPN: secure access to your infrastructure, decided per resource.

VPN connects your people to your organization's internal systems: the ERP, file servers, internal applications, Xenon, a supplier portal. From the office, from home, from a partner's site.

It is not a tunnel that opens a whole network. Each connection is a decision: who is asking, from what device, from where, to reach what. Only the resources that pass all four checks become reachable, and every decision is recorded.

ConnectedIRON ID Krypton · desktop08:55:02Connecting as S. BenaliMFA session08:55:03Device MacBook Promanaged · trusted08:55:03Network: Finance · Paris officepolicy finance-editor v1408:55:04ERP financeallowed08:55:04HR file sharedenied08:55:04Xenon · contractsallowed08:55:05Session sealed · entry #48 230audit log

How a connection works

Four checks, one resource.

  1. 01

    Identity

    Who is asking?

    Checked againstIRON ID account · MFA · roleS. Benali · finance editor
  2. 02

    Device

    From what?

    Checked againstRegistered device · trust levelMacBook Pro · managed · trusted
  3. 03

    Network

    From where?

    Checked againstNetwork context · locationFinance network · Paris office
  4. 04

    Resource

    To reach what?

    Checked againstPer resource policyERP finance · allowed

Features

What a VPN does. Then what a tunnel cannot.

  • Identity based accessSame accounts, MFA and roles as the rest of the platform.Early access
  • Device trustRegister devices; require a trusted device for sensitive resources.Early access
  • Per resource policiesGrant a resource to a role, a person or a device, not a whole network.Early access
  • Time bound accessGrants that expire: a week for a contractor, a day for an audit.Early access
  • Session recordsEvery session and access decision in the tamper evident audit log.Early access
  • External peopleContractors and partners reach one resource without a network account.Early access
  • From anywhereOffice, home, a partner's site: the checks are the same.Early access
  • Encrypted transportTraffic between the device and the resource is encrypted.Early access
  • On your infrastructureDeploy the access layer on premise or with your hosting partner.Planned
  • Site to siteConnect two of your own sites through the same policies.Planned

Apps

Where you connect from.

  • Early access

    Desktop

    macOS · Windows · Linux

  • Coming soon

    Mobile

    iOS · Android

  • Planned

    Browser

    Web applications through the access layer, no client

  • Planned

    Sites

    Site to site between your own locations

Tunnel or decision

What changes when access is a decision.

Credentials open a tunnelClassic VPN
  • Anyone with the credentials reaches the whole segment
  • The device is not part of the decision
  • Contractors get a network account
  • Logs live on the appliance, in their own format
Four checks grant one resourceIRON ID Krypton
  • Identity with MFA, the same as Silicon and Xenon
  • Device trust is part of every decision
  • Contractors get one resource, for a set time
  • Every decision in the tamper evident audit log

A policy you can read

policyfinance-editor · v14

allowerp.finance when device.trusted and mfa

denyhr.fileshare

allowsupplier.portal for atlas.haddad until 2026-03-19

sessionmax 8h · reauth on new network

FAQ

Questions buyers ask first.

Is this a traditional VPN?

No. It is identity aware access: each resource is granted individually to a person on a device, and every decision is recorded.

Can contractors use it without a network account?

Yes. A contractor gets time bound access to one resource with their IRON ID identity.

Does it work on premise?

That is the goal: the access layer is designed to deploy with private and on premise editions. Rolling out with early access.

What is recorded?

Session start and end, device, network context and each access decision, sealed in the audit log.

Launch

34 days to go

See IRON ID for your organization.

Join the waitlist to be onboarded in the first cohorts before launch, request a demo of the Platform, or request a quote for a Silver Sign SDK integration.

Join the waitlistRequest a demo

Reply within two business days · contact@iron-id.io