Hopr Connect for Workload and Application Networking

WHAT DOES IT DO? +++ Connects containerized workloads across all cluster, container system, and cloud environments. +++ Verifies machine identity trust for every connection. +++ Prevents identity theft, key theft, MITM, malware delivery, and session hijacking attacks. +++ Prevents access to workload endpoints by untrusted connections (access control). +++ Secures data in transit over the entire route between endpoints. +++ Creates an Automated Moving Target Defense and shrinks the attack surface.

HOW IT DOES IT: Hopr Connect equips containerized workloads with a "sidecar" (built on Envoy proxy) that includes a decentralized 'cert-free' machine identity and secrets management capability. This frees the workload from the centralized identity services that restrict connectivity outside an identity 'silo' (domain). Workloads manage their identity and secret credentials and automatically rotate them at a high frequency, creating an Automated Moving Target Defense (AMTD).

Hopr's SaaS monitors each connection to verify the identity and trust of workloads when they connect. Connections perform a Synchronous Ephemeral Encryption (SEE) protocol that builds an end-to end encrypted channel (at OSI Layer 4 or Layer 7) without a key exchange. The SEE protocol prevents untrusted endpoint access and achieves data confidentiality and integrity over the entire route between endpoints.

THE PRODUCT: Hopr Connect operates using Hopr SaaS infrastructure and a Hopr Sidecar at each workload (thin client). As workload-sidecar pairs are deployed an application network or "super mesh" is built without any of the connectivity constraints, complications, or costs of centralized cert-based identity services and workload identity federation.

HOPR SIDECARS: Lightweight, "thin clients" are built on open-source Envoy proxy and deployed host workloads. Two types are offered:

XTRA Sidecars are used for connecting workloads within an organization where they are deployed with initial trust.

K4C Sidecars are identical to XTRA but with additional capability for high-trust connections with third party workloads outside an organization (such as partners, affiliates, or suppliers with whom business must be conducted, but trust is uncertain). K4C turns an organization's public-facing workloads into gateways because the sidecar can securely connect outside the organization and inside the organization.

SUBSCRIPTION PLANS:

TRY FOR FREE... FOREVER: Use Hopr's Free Forever plan (this public listing) to deploy and operate up to 30 sidecars per month. Each sidecar may make up to 10,000 connections per month at no charge. (API calls and responses within a session after the connection is made are not metered and are unlimited). Sidecar operation will continue if the free volumes are exceeded, but will incur a consumption fee for each month of overuse.

CONSUMPTION-PRICED PLANS: Additional plans are "consumption priced" with volume discounted pricing. For custom pricing, Pay-As-You-Go (PAYG), and annual contract plans with premium features, please email: aws-mp-sales@hopr.co , for a Private Offer.

VALUABLE BENEFITS: *** Lower Cyber Risk . ------- Defends against 18 common cyber attacks. ------- AMTD ------- Prevent untrusted access *** Easily network services or applications located anywhere on the Internet. *** Assured Confidentiality and Integrity of data in transit. *** Improved cost efficiency. Eliminates the cost of centralized cloud IAM services. *** Improved container portability and interoperability across cloud environments. *** High trust identity verification necessary for financial and healthcare IT regulations. *** Low Adoption Costs. No code changes to existing apps or APIs. *** Future proof (quantum resistant) *** Resistant to AI threats