
ZTI MeshCore is a software-only Zero Trust platform that runs in 5 MB on every endpoint and keeps enforcing policy for seven days when the link to headquarters is denied.
It replaces the $50K–$500K-per-site SD-WAN and VPN appliance stack with a NIST 800-207 enforcement layer built for the conditions the Department actually operates in — denied, degraded, intermittent, and limited-bandwidth — with FIPS 140-3 validated cryptography end to end.
Zero Trust architectures that depend on reaching a cloud policy engine degrade to zero-access the moment that engine is unreachable. In a contested environment, that is not a resilient posture. MeshCore caches SVIDs and spools policy so enforcement continues without the mothership.
Where it leaves the alternatives behind.
DDIL survivability
Seven days of fully autonomous operation on cached SVIDs and a local policy spool. Enforcement continues when the policy engine cannot be reached — rather than collapsing to zero-access.
Mesh with per-flow Zero Trust
Direct peer-to-peer DTLS between co-located peers, with full per-flow policy evaluation. No hairpin through a distant cloud enforcement point.
Ultralight footprint
A 5 MB Rust binary, roughly 0.5 ms per Zero Trust decision, about 40 MB of RAM. It runs on embedded ARM64 tactical hardware and locked-down government laptops where heavyweight commercial clients cannot install at all.
One engine, built for two markets.
Tactical and denied-environment operators on GFE and embedded hardware.
Enterprise Zero Trust mesh for distributed and edge fleets.
Aligned to the frameworks you're accredited against.
- NIST 800-207 (Zero Trust Architecture)
- FIPS 140-3 (certs #4631, #5247)
- DDIL-resilient by design
Available now to government customers
ZTI MeshCore has been assessed awardable through the CDAO Tradewinds Solutions Marketplace as an awardable solution. Government users with a Tradewinds account can view the solution pitch and initiate a procurement conversation directly.
Go deeper on MeshCore.
More detail is on the way. Reach out for a briefing, or check back as we publish documentation for ZTI MeshCore.
One-page capability and specification overview.
Reference architecture and install notes for networked and air-gapped modes.
Walk through MeshCore with the team that built it.
Talk to the team that built MeshCore.
Jared Johnson leads product and business development for ZTI Solutions.