Vanta Read the spec ↗
The private layer · End-to-end encrypted

Encrypted before it ever leaves your device.

Vanta is an open-source, HyperEVM-native protocol for end-to-end encryption. Keys are generated and held on your device; plaintext never reaches a server. MIT-licensed. No token.

Try the sandbox Read the spec
01 — End-to-end

The key never leavesthe device.

Every message is sealed on-device with AES-256-GCM, from a key derived locally from your passphrase. The wire carries only ciphertext — whether it's one conversation or a billion, the guarantee doesn't weaken with scale.

02 — On-chain

Anchored to a ledgerno one owns.

Ciphertext is erasure-coded and replicated across independent nodes discovered on-chain. There is no central relay to seize and no single operator to compel. Deployed on HyperEVM 999 and Base 8453.

03 — Self-custodial

No account.No copy of you.

There is no server-side identity and no plaintext at rest. You hold the only key that opens your messages — lose it and not even the protocol can read them back. That is the point.

The proof · runs in your browser

Seal a message. Watch it disappear.

Real cryptography, right here — PBKDF2 → AES-256-GCM via your browser's WebCrypto. Nothing is sent anywhere. Type something, seal it, and read the cipher that leaves your device.

Outputsalt · iv · ciphertext (base64)
Seal a message to see the ciphertext that leaves your device.

AES-256-GCM · PBKDF2-SHA-256 · 150,000 iterations

How it works

No server ever holds your plaintext.

The path a message takes from you to them — sealed at both ends, opaque everywhere in between.

  1. Encrypt locally

    Plaintext is sealed with AES-256-GCM on your device. The key never leaves it.

  2. Shard

    The ciphertext is erasure-coded — split into redundant shards, each meaningless alone.

  3. Replicate

    Shards fan out across independent nodes discovered on-chain. No node holds the whole.

  4. Reassemble

    Any sufficient subset of shards rebuilds the exact ciphertext for the recipient.

  5. Decrypt locally

    Only the recipient's device holds the key. The message opens there, and only there.

Between the ends there is only opaque ciphertext — nothing to read, log, or seize.

The honest signals

What we can prove — and what we can't yet.

A privacy protocol you can't inspect is a promise you can't check. So: the whole thing is open, and here's exactly where it stands.

License
Open source · MIT
Every line is public and forkable at github.com/vanta-protocol.
Economics
No token
Nothing to buy, mint, or capture. The protocol is the product.
Deployed
HyperEVM 999 · Base 8453
Contracts on two public chains; nodes discovered on-chain.
Audit status
Not yet audited
Built on standard WebCrypto & EVM primitives — but not yet externally audited.
Pre-audit — read this Vanta is composed from standard, well-understood primitives, but the protocol as a whole is not yet externally audited. Don't trust it with life-critical secrets until an audit is published. Post-quantum sealing (ML-KEM) is reserved on the roadmap — not shipped; today's guarantees are classical AES-256-GCM.

The private layer,open to read.

Read the spec View on GitHub