Hardware · Root of trust · Patent pending

Secure the runtime,
not the model.

The Enclaweder™ is the hardware trust anchor for agentic AI — a sealed, tamper-evident USB device. Your model runs anywhere; the runtime that holds the keys and executes actions is bound to this device. Remove it or swap it, and your agents stop.

Order now — ships in about 4 weeks. US market only for now. Sorry, folks. International customers: contact us →  ·  Patent pending  ·  Enclaweder™

The Enclaweder — a small sealed black device with a debossed enclawed logo, connected by USB-C to a laptop running AI agents.
Product rendering. Patent pending.
What it is

The hardware half of enclawed.

A sealed, tamper-evident device that gives your AI agents a unique, unforgeable hardware identity — one they can prove on demand and can never quietly lose or hand off. Plug it in; enclawed™ does the rest.

How it works
01 · BIND

Only trust a genuine device

At startup the runtime confirms it's talking to an authentic Enclaweder™. A counterfeit or wiped unit is refused — no genuine device, no agent.

02 · GATE

Authorize every action

Every agent action is authorized against the device and recorded on a tamper-evident trail. Nothing runs unaccredited.

03 · FAIL-SECURE

Fail-secure

Unplug it or swap it → agent operations halt at once and won't resume without the genuine device and a human. The sealed enclosure is tamper-evident — opening it leaves unmistakable evidence.

Don't trust the agent's brain. Enforce its authority in tamper-proof hardware.

A cloud model can be manipulated — prompt-injected, jailbroken, or its provider compromised. It doesn't matter: the runtime that grants capabilities and pulls the trigger is locked to your machine, and no manipulated prompt can move that line. Run the model anywhere — cloud or local. No GPU required.

Built to a government bar

Designed to the FIPS 140-3 Level 2 requirements.

Genuine-device verification, fail-secure operation, and a sealed, opaque, tamper-evident enclosure — engineered to a recognized government security bar, not hand-waved. Active tamper-response, formal validation, and higher assurance levels are on the roadmap.

At a glance
Device identityunique & unforgeable
Every actionauthorized & recorded
On removalagents halt (fail-secure)
Enclosuresealed, tamper-evident
Cryptographystandards-based
Works withany model · cloud or local
Designed toFIPS 140-3 L2
ConnectionUSB-C
Compatibility

Plug it into anything with a USB port.

The device is standard USB HID: it works with any computer whose operating system supports the USB standard, needs no drivers and no power supply, and ships as is. The connector is USB-C; a USB-C adapter is required for other ports and is not included.

The enclawed™ software that drives it runs on Linux, macOS, and Windows 11 — natively, and on Windows also via WSL2.

Deviceany USB-capable OS
Software · todayLinux · macOS · Windows 11
Drivers · powernone · USB-powered
Connector · shipsUSB-C · as is