The platform, capability by capability

BlackWall is one control plane covering three problems that are normally solved by three vendors: who someone is, what they are entitled to, and what they did. Everything below runs against the same tenancy model and writes to the same tamper-evident audit trail.

Passwordless identity

WebAuthn as the only authentication method. Enrolment by one-time link, multiple authenticators per user, and self-service key management in the portal.

OAuth 2.1 & OpenID Connect

Authorisation code with mandatory PKCE, JWT or opaque access tokens, custom claims, revocation, introspection and a discovery document your libraries configure themselves from.

Software licensing

Ed25519-signed entitlements bound to exact hostnames, features and instance counts, with an authoritative verifier, immediate revocation and automatic renewal reminders.

Multi-tenant administration

Organisations, projects, ten named privilege rungs, per-project feature flags, and an approval workflow that holds sensitive changes for a second decision-maker.

Audit & assurance

A hash-chained audit log, signed tip checkpoints that detect truncation, correlation IDs for cross-service tracing, and release provenance on the dashboard.

Enterprise federation

A SAML 2.0 identity provider for applications that cannot speak OIDC, SCIM 2.0 provisioning from your HR platform, and HMAC-signed webhooks for event-driven integration.

Cryptbin

End-to-end encrypted sharing for text and files. The browser holds the key, the server holds ciphertext it cannot read, and entries expire on a schedule.

One tenancy model

Every capability on this page is scoped by organisation and project. A privilege level, a licence, a webhook and an audit row all point at the same project — which is why revoking access in one place actually revokes it everywhere.