# PasskeyBridge

> Identity Threat Response as a Service (ITRaaS). Carrier-signal verification, passkeys, and W3C verifiable credentials with sub-50ms latency and zero-PII architecture for modern apps and AI agents.

PasskeyBridge is the identity trust layer for modern apps and AI agents. Every signal verified, under 50ms. The platform fuses carrier-grade identity signals (SIM-swap detection, port-out, silent number recycling), passkey authentication (FIDO2/WebAuthn), and W3C Verifiable Credentials (SD-JWT-VC, OID4VCI) into a single edge-first attestation layer. Hybrid post-quantum cryptography (ML-DSA-65 + classical), zero primary identifiers stored, SOC 2 Type II observation underway. Operated by PasskeyBridge LLC.

## Pages

- [Home](/): Product overview, pillars, and trust signals.
- [Solutions](/solutions): Use cases across fintech, agentic commerce, and enterprise IAM.
- [Pricing](/pricing): Free, Pro, and Enterprise tiers.
- [Whitepaper](/whitepaper): Architecture, threat model, and cryptographic primitives.
- [Settlement Tokens](/settlement-tokens): Physics-anchored identity settlement (PIST) tokens.
- [Hardware Brief](/hardware-brief): TEE, secure-element, and HSM integration model.
- [SDK](/sdk): Client SDK, RASP-lite defenses, and integration guide.
- [Patents](/patents): 16-patent portfolio covering quantum-resistant entropy and physics anchors.
- [FAQ](/faq): Common questions on architecture, privacy, and compliance.
- [Contact](/contact): Reach sales, support, or security.
- [Partners](/partners): Carrier and IdP integrations.
- [Changelog](/changelog): Public release notes.
- [Status](/status): Live operational health, latency, and component status.

## Developers

- [API Playground](/developers/playground): Run real /health pings with p50/p95/p99 latency.

## Security and Compliance

- [Security](/security): Security program overview.
- [SOC 2 Request](/security/soc2-request): Request the SOC 2 readiness package.
- [Trust Center](/trust-center): Compliance program grid.
- [Trust Center: Controls](/trust-center/controls): Detailed control mappings.
- [Trust Center: Package](/trust-center/package): NDA-gated evidence package.
- [Privacy](/privacy): Privacy policy and zero-PII architecture.
- [Terms](/terms): Terms of service.

## Compare

- [vs Persona](/compare/persona): How PasskeyBridge compares to Persona.
- [vs Prove](/compare/prove): How PasskeyBridge compares to Prove.
- [vs Twilio Verify](/compare/twilio-verify): How PasskeyBridge compares to Twilio Verify (OTP vs continuous attestation).

## Solutions

- [MFA Alternative](/solutions/mfa-alternative): Carrier-bound passkeys as a replacement for SMS OTP and push MFA.
- [Fraud Prevention API](/solutions/fraud-prevention-api): Sub-50ms signed device-plus-carrier signal as a pre-decision input.
- [Identity Assurance Platform](/solutions/identity-assurance-platform): Continuous per-request assurance across passkeys, DPoP, carrier, and VCs.
- [Account Takeover Prevention](/solutions/account-takeover-prevention): Bind sessions and recovery to live carrier state and hardware passkeys.
- [SIM Swap Detection](/solutions/sim-swap-detection): Live carrier-state checks inside the auth path, not a nightly batch.


## Blog

- [Blog Index](/blog): All posts on identity threat response, carrier signals, post-quantum cryptography, and agentic identity.
- [Introducing PasskeyBridge](/blog/introducing-passkeybridge): Why ITRaaS is a new category.
- [Identity Threat Response 2026: ITRaaS](/blog/identity-threat-response-2026-itraas): The category thesis.
- [Detect SIM Swap in the Next 50 Milliseconds](/blog/detect-sim-swap-next-50-milliseconds): Edge-first carrier-signal verification.
- [Delegating Identity to AI Agents Without Delegating Trust](/blog/delegating-identity-to-ai-agents-without-delegating-trust): Agentic delegation patterns.
- [Reg S-ID Compliance Without Storing the Phone Number](/blog/reg-s-id-compliance-without-storing-phone-number): Zero-PII compliance pattern.
- [Hybrid Signatures: Dual-Signing ML-DSA + Ed25519](/blog/hybrid-signatures-dual-signing-ml-dsa-ed25519): Post-quantum migration path.
- [Post-Quantum Identity: NIST FIPS 204 Auth Stack](/blog/post-quantum-identity-nist-fips-204-auth-stack): ML-DSA in production.
- [SOC 2 Type II Audit Controls for Identity APIs](/blog/soc2-type-ii-audit-controls-identity-apis): Audit-ready control mappings.
- [CISO Guide: Zero-PII Identity Verification](/blog/ciso-guide-zero-pii-identity-verification): Architectural primer for security leaders.

## Optional

- Documentation lives at https://docs.passkeybridge.io (separate subdomain). Crawl that host directly for API reference, integration guides, and architecture deep-dives.