Desktop UI
Import P12 or PKCS#11, sign files and folders, verify outputs offline.
Local integration
Connect tools without leaving the machine
Desktop is the signing plane. Pair local business apps over 127.0.0.1, or connect the browser extension through Native Messaging. Media and private keys stay on device.
Three local paths
Extension + Native Messaging
Verify in the browser; privileged operations go through an allowlisted native host to Desktop.
Localhost bridge
DAM/CMS apps on the same machine pair with user approval and HMAC-authenticated requests.
CLI (airgap)
Scripted enterprise airgap workflows for controlled environments.
Integrators: never call the bridge from untrusted websites; store pairing secrets in OS secure storage; expect deep-link user confirmation for pairing and sign review. Pilot sample notes ship with the Enterprise Pilot package.