HYVE ETHER OS · SERVER EDITION
THE SOVEREIGN
ENTERPRISE BACKEND
Everything a company's internal backend must do — directory, authentication, role-based access, data services, file shares, VPN, firewalling, monitoring, backups — with HYVE's sovereign differentiators: fully local AI, gated and attested agents, a tamper-evident audit ledger, and no phone-home. Air-gappable end to end.
WHAT SHIPS IN THE BOX
Directory SSO + MFA
389-DS enterprise directory federated into Keycloak. OIDC single sign-on with TOTP multi-factor enforced for every user.
Per-action RBAC
owner · admin · operator · auditor · viewer. Every organ authorizes the specific action behind an authenticating reverse proxy.
Tamper-evident audit
Append-only access-decision trail plus immutable kernel auditd. A role-gated console surfaces who did what.
Default-deny firewall
nftables locks the box to only what it needs; internal services are never exposed to the network. WireGuard for sovereign remote access.
Fully local AI
Every model runs on your own hardware. No cloud dependency, no per-use fees, no phone-home. Air-gappable end to end.
Install-time provisioning
The operator sets the admin identity and credentials at install — no baked-in accounts. Root locked behind sudo by default.
Encrypted backups
Scheduled restic backups of the directory, databases, and configuration — staging shredded, retention enforced.
Data & file services
PostgreSQL, plus authenticated SMB file shares scoped behind the VPN. Containers via rootless Podman.
GO DEEPER
SALES
Request a Quote
Tell us your environment — node count, air-gap needs, compliance scope — and we'll return a scoped proposal plus the security package.
REQUEST A QUOTE →DOCS
Enterprise Manual
The complete operator manual: architecture, install, identity, RBAC, auditing, backups, hardening, and the honest security posture.
READ THE MANUAL →TRAINING
HYVE University
A structured learning track for administrators and auditors — from foundations to a certified deployment path.
ENTER THE UNIVERSITY →OUR POSTURE
We do not fake certifications or invent numbers. HYVE Ether OS — Server Edition is built to enterprise and government control frameworks, hardened through independent adversarial review, and shipped with an honest compliance posture. See Compliance and Security, and request the full control mapping with your quote.