Ahmad ZushanAI · Systems · Platform

Home/Work/№ 16

16 · Security & Systems

Crayto — Zero-Trust Browser Extension

Extends a browser extension into a full Zero-Trust password-protection agent with licence management, corporate-domain enforcement and policy-driven responses.

Period2025StatusSecurity productAreaSecurity & Systems

Highlights

  1. Decision engine combines origin whitelist, form.action check, inline-JS risk analysis and corporate-email-domain match → Block / Caution / Approve modal.
  2. No password data ever leaves the client; telemetry is hashes and timestamps only; mTLS and short-lived JWTs.
  3. Fails closed for corporate domains, works offline on last-known policies, signed policies with expiry, WebSocket policy push.