WebSign provides a static web hosting platform that secures sites with quantum‑resistant code signing, using SPHINCS+ and elliptic‑curve cryptography to prevent tampering. Its developer tool signs sites at deployment and includes a Trust‑on‑First‑Use validation layer, while also supporting instant updates for web, Cordova, Capacitor, and Electron apps to keep content evergreen.
Funding
Funding not disclosed
Founders
Product
Problem
Static websites and hybrid apps are vulnerable to code and content tampering, and traditional code‑signing methods do not protect against emerging quantum‑computing attacks. This risk limits the use of web‑based platforms for security‑critical applications.
Solution
WebSign offers a static‑hosting service that applies quantum‑resistant code signing to every deployment. Using a patented combination of elliptic‑curve cryptography and the NIST‑approved SPHINCS+ post‑quantum algorithm, the platform signs the site with the developer’s private key and validates it in the browser via a Trust‑on‑First‑Use security layer. The service also provides automatic, instant updates for web, Cordova, Capacitor, and Electron applications, ensuring that users always run the latest, verified code without manual intervention. By caching a full local copy of the site on each client, WebSign eliminates repeat‑visit latency and enables offline access while maintaining end‑to‑end security.
Target Audience
WebSign targets developers and product teams building static websites or hybrid mobile/desktop applications that require strong tamper protection, such as financial services, healthcare, and enterprise SaaS platforms.
Features
- Quantum‑resistant code signing that combines elliptic‑curve cryptography with SPHINCS+ for post‑quantum protection
- Simple developer tool that packages and signs the site during deployment using the developer’s private key
- In‑browser Trust‑on‑First‑Use validation layer to detect tampering at load time
- Instant, automatic update mechanism for web, Cordova, Capacitor, and Electron apps, similar to CodePush
- Full client‑side caching of the site to remove network latency on repeat visits and support offline usage
- Support for native code updates via NativeScript‑Capacitor integration