Craton Shield
The Universal Security Primitive Stack for High-Assurance Embedded Systems.
products.vehicleshield.versionInfo
Frames at line rate, through every detector, with no heap.
Traffic from five protocol families arrives on its own lane and passes the same gates. The buffer pool underneath is fixed at build time — frames take a slot and give it back, and nothing is ever allocated.
The protocols and detector stages are the real ones. The block rate here is illustrative — a real deployment's depends entirely on its policy and its traffic. The number that is not illustrative is the last one: the runtime is `#![no_std]` and zero-heap, so that counter stays at zero however long you leave the page open.
Modern problems require modern solutions.
Craton Shield is a comprehensive family of memory-safe, #![no_std] Rust security modules designed to provide a unified defense-in-depth architecture for the most demanding embedded environments.
From IoT leaf nodes to complex automotive gateways and industrial controllers, Shield provides the primitives necessary to build secure-by-design systems. Each product builds on Shield Core — the open-source foundation providing CAN/Ethernet monitoring, basic crypto traits, tamper-evident logging, and an anomaly detection engine.
Shield Auto targets automotive ECUs with AUTOSAR Adaptive integration and V2X security. Shield Embedded delivers ultra-low-footprint security for IoT and wearables. Shield Industrial protects PLCs and SCADA systems with Modbus/OPC-UA/PROFINET IDS. Shield Enterprise adds HSM integration, post-quantum cryptography, and OTA orchestration for production-grade deployments.
All products share unified design principles: native bare-metal and RTOS compatibility, zero-allocation static memory, default-deny security posture, and predictable constant-time execution. CAN frame detection runs in under 500 ns on Cortex-M7 with zero jitter.
5 Products, 1 Unified Architecture
Shield Core (foundational IDS & crypto), Shield Auto (ISO 26262 / AUTOSAR), Shield Embedded (IoT / low-power), Shield Industrial (IEC 62443 / OT), and Shield Enterprise (HSM & post-quantum).
Memory-Safe by Construction
Written in 100% safe Rust (excluding minimal, audited FFI blocks). Zero-allocation, statically bounded data structures — no heap required. Eliminates 70% of the CVE classes that dominate embedded security bulletins.
Defense-in-Depth for Connected Systems
From IoT leaf nodes to automotive gateways and industrial controllers. CAN/Ethernet monitoring, tamper-evident logging, anomaly detection, V2X security, Modbus/OPC-UA/PROFINET IDS, and OTA orchestration.
The Technical Edge
Why experts choose Craton Shield
Modular Product Architecture
All products build on Shield Core (Apache-2.0). Specialized modules — Auto (ISO 26262), Embedded (ESP32/nRF52), Industrial (IEC 62443), Enterprise (BSL-1.1) — include only the crates necessary for each target platform.
Sub-Microsecond Deterministic IDS
CAN frame detection in under 500 ns on Cortex-M7. Zero jitter IDS engine with constant-time cryptographic verification. Scalable from constrained sensors to high-performance gateways.
Hybrid Licensing Model
Open source (Apache-2.0): Core, Auto, Embedded, and Industrial — fully transparent to drive industry-wide adoption. Commercial (BSL-1.1): Enterprise features, HSM integration, post-quantum crypto, and professional support.