Citium Software builds hyper-modern security infrastructure for enterprises and SMBs. Our products are designed with Stoic principles: simplicity, control, and reason.
"You have power over your mind - not outside events. Realize this, and you will find strength."
Marcus Aurelius
Named after Zeno of Citium, the father of Stoicism, our products embody logic, simplicity, and control. Each solution is purpose-built for modern security challenges.
Sovereign Edge Tunnel
Publish services from your cluster or server through European edges. Your side dials out, so you open no inbound ports, and the edge never decrypts your traffic.
Sovereign IAM
IAM, Privileged Identity Management, and Verifiable Credentials in a 16 MB Rust binary. OAuth 2.0, OIDC, SCIM v2, native Entra ID provisioning, and W3C VC issuance.
Tamper-Evident Audit Trails
Storage-agnostic, cryptographically verifiable audit logging with Merkle tree proofs and post-quantum signatures. Embed it, run it as a service, or scale it to a cluster.
The Sovereign Cloud Platform
Complete self-hosted Kubernetes platform with integrated services. Bootstrap a production-ready sovereign cloud in 45 minutes with 94% cost savings.
License Management System
Centralized, product-agnostic license management for software vendors. Handle license generation, validation, feature gating, and customer entitlements.
Self-Hosted OCI Container Registry
Single Go binary with embedded admin UI. Full OCI Distribution API, S3-compatible storage, OIDC SSO, role-based access, and built-in image retention policies.
Zero-Knowledge Secrets Management
Enterprise-grade secrets vault with zero-knowledge architecture. The service itself cannot access your secrets without explicit human intervention.
Unprecedented Performance
The world's fastest Kubernetes ingress controller. Built in Rust for Gateway API with sub-millisecond latency and a ~5 MB memory footprint.
Your Credentials. Your Control.
Standards-based verifiable credential wallet for web and mobile. Receive, hold, and present digital credentials with selective disclosure and offline QR presentation.
Self-Hosted Transactional Email
Production-ready transactional email platform with Git-like template versioning, GDPR crypto-shredding, and zero vendor lock-in. Free forever.
Ultrafast In-Memory Caching
Hyper-modern in-memory cache written in Rust. Drop-in Redis replacement with sub-millisecond latency and zero GC pauses.
Self-Hosted Consent Management
Cookie consent without paying per domain. A consent banner, prior script blocking, tamper-evident proof of consent and a multi-tenant dashboard on your own servers.
Lightweight OpenTelemetry Log Viewer
In-memory observability tool that captures, buffers, and serves OpenTelemetry logs with instant visibility. Single binary, zero infrastructure, zero configuration.
Markdown & Mermaid Viewer
Beautiful Markdown rendering with Mermaid diagrams, syntax highlighting, and dark/light themes. Works as a Microsoft Teams tab or standalone in any browser. No server required.
Self-Destructing Secret Sharing
Share passwords, API keys, and sensitive messages via encrypted, one-time links. End-to-end AES-256-GCM encryption — the server never sees your plaintext.
Named after the ancient port city of Citium - birthplace of Zeno and gateway between civilizations - we build security infrastructure guided by Stoic principles.
You cannot control the threats. You can control the gate. We focus on building impenetrable gateways rather than chasing every possible threat.
Security through reason, not paranoia. Every decision is based on mathematical certainty and rational analysis, not vendor FUD or security theater.
Complexity is the enemy of security. Fewer moving parts means fewer failure points. Our solutions are minimal by design - no bloat, no unnecessary dependencies.
European engineering excellence. Danish quality. No compromises on security or performance.
Every component is designed with zero-trust principles. No implicit trust, no shortcuts, no compromises.
Built in Denmark. Run on your infrastructure. Your data never leaves your control. GDPR-compliant by design.
Written in Rust and Go for maximum performance. Sub-millisecond latencies. Minimal resource footprint.
First-class Kubernetes support with operators, CRDs, and native integrations. Not retrofitted - designed for cloud-native from day one.
OAuth 2.0, OpenID Connect, SCIM, Gateway API - we implement standards, not proprietary protocols.
Clear documentation. Predictable behavior. No hidden costs or surprise licensing. What you see is what you get.
Join security-conscious organizations who trust Citium Software for their critical infrastructure. Contact us to discuss your requirements.