Ockam

Ockam is an open-source toolkit for building secure-by-design applications that can trust data in motion. It orchestrates end-to-end encryption, cryptographic identities, mutual authentication and authorization policies between distributed applications, at the scale of many connections.

Its documentation describes a different approach to secure connections: establishing secure channels between systems in private networks that could not be connected before because it was too difficult or insecure, and making public endpoints private so applications and databases can connect without exposing anything publicly. The docs compare Ockam with VPNs, reverse proxies and public API endpoints, and the topics include Kafka, key management, zero trust and messaging.

The core project is written in Rust and licensed under Apache-2.0, with an Ockam Command CLI, programming libraries and protocol documentation. The docs describe it as developed by hundreds of contributors over several years, and it suits teams building zero-trust connectivity between services.