Skip to main content
Open Source & CSA

Built on OpenNHP — The Internet Standard for Invisibility.

OpenNHP is a cryptographic protocol that makes infrastructure invisible to attackers while remaining accessible to authenticated users. Developed with the Cloud Security Alliance, it's the foundation of next-generation preemptive security.

The Protocol

How OpenNHP Works

Single Packet Authorization (SPA) flips the security model. Instead of exposing services and filtering bad actors, hide everything and only reveal to verified users.

1

Default Deny

All ports closed. No response to any probe. Your infrastructure is invisible to scanners.

2

Cryptographic Knock

Authenticated users send a single encrypted packet proving identity before any connection.

3

Micro-Authorized Access

Port opens only for that user, only to that resource, only for that session.

The result: Attackers can't exploit what they can't see. No reconnaissance, no vulnerability scanning, no lateral movement.

Why It Matters

What Makes OpenNHP Different

Invisible by Default

Unlike firewalls that respond to probes, OpenNHP makes infrastructure undetectable. No ports, no banners, no attack surface.

Zero Latency Overhead

Single Packet Authorization adds <1ms latency. No VPN tunnels, no performance degradation.

Identity-First Architecture

Authentication happens before network access, not after. Integrates with your existing IdP (Okta, Azure AD, etc.).

Commercial Implementation

Why LayerV?

OpenNHP is the protocol. LayerV.ai is the enterprise platform.

Enterprise-Ready

Production-hardened implementation with SLAs, support, and compliance documentation.

Managed Infrastructure

Global edge network, automated deployments, and monitoring — so you focus on your business.

Security Expertise

Direct access to the protocol co-authors. We don't just implement the spec — we wrote it.

Open Protocol. Enterprise Platform.

Build on the standard with LayerV's production-ready implementation.