Pioneers of zero-trust
security solutions.

Aranya is SpiderOak's edge-native, embedded software toolkit for building identity, authentication, authorization, encryption, and policy enforcement directly into applications and systems. Teams define custom security policies with the Aranya DSL and enforce them alongside the resources they protect, without centralized infrastructure or dependencies.

SpiderOak Mission Systems is a 100% U.S.-owned and operated software company dedicated to solving the computer security challenges of the 21st century. Our team built the first zero-trust, no-knowledge security tools in 2006 and today builds Aranya for government, defense, space, and critical infrastructure organizations.

Yes. Aranya is serverless and decentralized by design, so authorized nodes keep operating securely when networks are offline, partitioned, or degraded. Asynchronous end-to-end encryption protects data without continuous connectivity, and nodes automatically synchronize state when the connection returns.

Yes. The open source edition of Aranya, which includes Aranya Core, Aranya Embedded, and Aranya Microsegmentation with community support, is available on GitHub. Aranya Commercial is available for teams that need professional support and certification.

Both editions include Aranya Core, Aranya Embedded, and Aranya Microsegmentation. Aranya Commercial adds phone and email technical support, verified builds, a certified compiler, FIPS certification, consulting and integration services, and the right to use Aranya in closed source, proprietary software.

The Aranya DSL is a policy-as-code language for defining custom security policies. It separates security policy from implementation, which makes controls easier to build, maintain, audit, and update as requirements change, and shortens development cycles.

Aranya needs less than 500KB of RAM and less than 2MB of storage. It is written in Rust, a memory-safe systems language, delivers line-rate encryption with enforcement decisions in fewer than 100 instructions, and runs independently of any specific operating system or network.

Aranya gives every user, device, and resource a strong cryptographic identity and enforces identity and policy where operations happen, not at a central server. Cryptographically enforced access controls and data-level microsegmentation shrink the attack surface and limit lateral movement if a system is breached.

Aranya has been deployed and validated across space, defense, and critical infrastructure, including work with Raytheon BBN, the Space Development Agency, the Defense Innovation Unit, AFRL, and Solitude Labs. It has proven flight heritage from on-orbit deployments with Axiom Space on the ISS, Ball Aerospace, and TrustPoint.

Developers can try the open source edition of Aranya on GitHub at github.com/aranya-project. For Aranya Commercial, technical support, or help integrating Aranya into your product, contact SpiderOak sales to request a demo.