Protect your infrastructure with a cryptographic seal that goes layers deep.
Built on the .NET 10 core for sub-millisecond response times.
Encrypt PII at the edge. Your server never sees raw sensitive data.
Fully compatible with Native AOT for serverless efficiency.
Visualizing the kernel-level cryptographic handshakes.
Deep-dive into the .NET 10 InceptionSeal Engine.
Registers the ISealEngine into the DI container. Handles automatic discovery of custom security policies within the calling assembly.
| Options Configuration delegate |
Action<SealOptions> |
| VaultType Storage provider mode |
Enum (Local/Cloud) |
On execution, the engine instantiates a ThreadLocal Cryptographic Context. This ensures sub-millisecond validation without locking the main execution thread.
An Action Filter that validates the Sealed Identity before the controller action executes. Supports nested depth requirements.
| Depth Required protection level |
SealDepth (1-3) |
| Bypass Allow anonymous override |
Boolean |
If depth requirements fail, the middleware issues a SecurityHandshakeException, which is captured and converted to a 403 Forbidden automatically.
Global hook triggered immediately after a successful cryptographic handshake. Use this for custom claim transformation.
| Context Current Request Data |
SealContext |
Minimize logic within this event. It executes in the synchronous path of the request pipeline. Use Task.Run for non-blocking logging.
Integrate InceptionSeal into your existing .NET solution in seconds.