Every record sealed.
Every block provable.
SHA-256 hash-chained. Verify any block yourself with standard tools. No login. No vendor access.
How It Works
Three steps. No intermediaries. The math is public.
Write
A fact is recorded: a scan result, a decision, a delivery timestamp. It is sealed with the SHA-256 hash of the previous block, extending the chain.
Chain
Each block carries its own hash and the hash of the block before it. Alter any record and every hash after it breaks. The chain's history cannot be rewritten silently.
Verify
Anyone can recompute the hash from the raw block JSON using Python's standard library. No account. No API key. No trust required.
Verify Any Block Yourself
Paste a block height or 64-character hash into verify.strikaris.com, or use the API directly.
# Fetch a block
curl https://verify.strikaris.com/chain/block/42 > block.json
# Recompute the hash locally
python3 -c "
import json, hashlib
b = json.load(open('block.json'))
entry = {k: b[k] for k in ['id','timestamp','agent','status','action','details']}
print(hashlib.sha256(json.dumps(entry, sort_keys=True).encode()).hexdigest())
"
# The output must match block.json's 'hash' field. Standard library only. No external dependencies.
Engagement Tiers
Every engagement is chain-sealed. Auditors verify the deliverable hash at any time after the fact.
Seed
24hPublic-surface scan of a single domain. TLS, DNS, security headers, privacy page. Findings sealed on-chain.
2-page PDF + JSON hash + verify link
Ember
48hFocused burst on one subsystem: a module, small infra stack, or IAM configuration. Findings and file hashes sealed on-chain.
6-10 page report + chain block reference
Forge
5 business daysOrg-level review: full API catalog, cloud posture, compliance documentation. Chain-sealed diff bundle.
20+ page report + traffic-light dashboard
Beacon
MonthlyContinuous re-scan on a fixed cadence. New chain blocks each month. Badge API for your own dashboard.
Monthly blocks + badge API + webhook alerts
The Chain Is Open Source
The ledger infrastructure is publicly auditable. Four files: a chain server, a heartbeat ticker, an integrity auditor, and an author relay. SQLite by default, storage-agnostic by design.
- SHA-256 hash algorithm fully documented
- Any block verifiable offline with standard tools
- Deployment instructions and systemd unit files included
Start with a Surface Scan
A Seed scan takes 24 hours and costs less than a missed finding. The Surface Card arrives chain-sealed, ready for your auditor.