Estate Gate
Boom-gate variance as first-class state
Person↔vehicle variance, QR anti-passback, contractor compliance via OmniSign, and BOLO hold — without blocking the lane.
Read →Sovereign · SA-resident · POPIA by architecture
Unified Security.
Total Spectrum Intelligence.
We fuse IoT, AI and community action into a single, unbreachable shield. 22 products — from sovereign IAM and gate-true visitor management to autonomous defence mesh and solar telemetry — all deployed on your tin, in South Africa.
No offshore scrubbing centre Offline-capable lanes Eureka capability tokens
22
Products
21 portfolio + GatePoint
20
Production
audited 2026-09-30
100% SA
Residency
POPIA by architecture
400+
Tests
across suite
Maturity
Production
17 products
Mesh
Eureka + Identity
every service
Edge
ESP32 · Modbus
offline ACL
Built for South African reality
Foreign per-MAU IAM rents PII offshore. Estate gates need sub-second licence/disc/ID decode with defamation-safe BOLO. Solar must survive load-shedding. Weighbridges and booms must correlate when links flap. MobiSec builds where the gap is — SA-resident, tenant-isolated, offline-capable.
- ▸ Tenant isolation via EF global filters + JWT claim gates
- ▸ Sealed blobs · no central honeypot · BYOS
- ▸ Isolated parser fleet (one container per format)
- ▸ Coraza WAF → ipset closed loop · Go daemons at host-net
Thesis
Every suite service is Eureka-enabled by default.
Ed25519 purpose-bound, expiring, audience-scoped tokens verified at the edge — no central permission lookup to breach.
How it fits →Three Pillars
Identity & Access · Security & Infrastructure · Operations & IoT — unified by one fabric.
◈
Identity & Access
Sovereign OIDC hub, gate-true visitor management, access/attendance, document verification and trust scoring — with SA licence/Smart ID/passport decode at the edge.
OmniTrustOmniVisitGatePointOmniParse
⬢
Security & Infrastructure
Autonomous defence mesh, WireGuard fabric, DynDNS/shortlinks, styled-QR and cryptographic sealing — with BEC invoice ledger and 3-tier mail proxy.
OmniWallRazorWireRazorOmniSign
⬣
Operations & IoT
Yard, queue, fleet, patrol and energy — plus the Modbus terminals that keep booms and weighbridges live through outages.
OmniYardOmniGridRDT EdgeOmniPatrol
Featured Products
Production-hardened core — dive into 22 on the catalogue.
OmniTrust Identity
Production confidence highIdentity & Access · Available
Sovereign OIDC/OAuth2 identity hub with hierarchical MFA, notification mesh and POPIA-by-architecture vault.
OpenID Connect / OAuth2 IdP (OpenIddict)15+ MFA providers with hierarchical policyHierarchical account-security policy (lockout, verification, session, password age)
Explore OmniVisit
Production confidence highIdentity & Access · Available
Gate-true visitor, contractor and vehicle management with QR lifecycle and BOLO two-stage security intel.
Pre-registration + host approvalQR pass lifecycle with anti-passbackGate scan + decoded licence/disc/ID via OmniParse
Explore OmniParse
Production confidence highSecurity & Infrastructure · Available
Isolated document-decode gateway for SADC licences, Smart IDs, passports and containers.
SADC licence PDF417 + SWI32 wavelet decodeNaTIS disc decodeSA Smart ID decode
Explore OmniWall
Production confidence highSecurity & Infrastructure · Available
Autonomous defense mesh: Coraza WAF, Go enforcement daemons, SOC and secure mail proxy.
Coraza WAF (Traefik ForwardAuth /verify, L7→L3 ipset closed loop)Go enforcement daemons (host-net, command pipeline incl. QuarantineFile)MailProxy: SHA-256 invoice ledger, verification badge, 3-tier ZIP/.bdna/AES-GCM, MIME deflate/inflate per-part SHA, IMAP/POP3/SMTP gates
Explore Eureka
Production confidence highDeveloper Technologies · Internal
Ed25519 capability-token authorization fabric — purpose-bound, expiring, audience-scoped.
Ed25519 capability tokensPurpose-bound (issuer, audience, purpose)Expiring + replay-resistant
Explore GatePoint
Beta confidence mediumIdentity & Access · Beta
BYOB gate-scanner app + hardened Rust SDK — BYO backend, MQTT-native, per-device licensed.
Android Kotlin + Compose scanner appHardened Rust core (.so): SADL, PDF417, SWI32, 2-stage licence, AES-GCM, garbage+watermarkDynamic runtime engine: workflows/rules/SOS/BOLO/alerts
Explore Maturity — audited, not asserted
Status confidence and evidence are first-class. High confidence means production compose, tests and docs verified 2026-09-30. Not colour-only: icons + labels.
●Production20
Compose, tests, docs verified. Includes 75-test OmniQr, 126-test OmniLock, 64-test OmniIdv.
◐Beta2
Field-trial or spec-harness gated. GatePoint v3 spec, RDT Edge Modbus terminals.
◑Active Dev1
OmniFleet Phase-2 still open (GTFS/MAUI live-wiring), SWI32 RE lab.
Evidence
Every pill links to source: Executive Summary §, repo .sln, and status_verified_at.
Inspect per product →Ecosystem
One tenant claim, one audit trail. Explore integrations — or jump to the full interactive map.
Ecosystem Map
Interactive map — zoom and pan. Each node links to product detail. Jump to accessible list
Identity & AccessSecurity & InfrastructureOperationsDeveloper TechnologiesIoT & Engineering
OmniTrust Identity — Identity & AccessOmniVisit — Identity & AccessOmniSign — Security & InfrastructureOmniQueue — OperationsOmniParse — Security & InfrastructureOmniQuip — OperationsOmniWall — Security & InfrastructureEureka — Developer TechnologiesRazorWire — Security & InfrastructureRazor Compression — Developer TechnologiesOmniDNS — Security & InfrastructureOmniGrid — IoT & EngineeringOmniQr — Developer TechnologiesMobiSec UI — Developer TechnologiesOmniIdv — Identity & AccessOmniLock — OperationsOmniScore — Developer TechnologiesOmniYard — OperationsOmniAccess — Identity & AccessOmniPatrol — OperationsOmniFleet — OperationsGatePoint — Identity & AccessRDT Edge Controllers — IoT & Engineering
Services
Custom Engineering
C# / .NET MAUI / Blazor, MAUI, Rust, ESP32-C3 — from parser fleets to Modbus terminals.
Engagements →IoT & Protocol
MQTT, Modbus RTU, BLE/QR onboarding, offline ACL sync — yards that survive load-shedding.
Protocols →Security Architecture
WAF → L3 ipset, BEC ledger, EDR + YARA, fail-closed liveness and purpose-bound tokens.
Assessments →Why MobiSec
Sovereign
SA residency
Self-hosted on Coolify. No foreign scrubbing centre. Sealed blobs — schemas server-side, values client-encrypted.
Offline-first
Lanes that queue
Gate lanes, patrol and yard sync with idempotent drains. SPIFFS ACL when cloud is absent.
Defamation-safe
Two-stage BOLO
Tenant hotlist → silent Hold + PendingVerification → human confirm → mesh notify. Never auto-dispatched.
Purpose-bound
Eureka fabric
Ed25519 tokens purpose-bound (nda:visit:<id>), expiring, audience-scoped — verified at edge.
Case Studies
All stories →Vision
Every signal fused. Every community covered.
From encrypted vaults to Modbus terminals — we turn small, unrelated incidents into a single picture of intent. The Gauss doctrine: coordinated, not merely organized; fluid, not predictable.
Our vision →“Every man has the responsibility to put back into the world at least equal to what he took out of it.”
— Founder · cv.mobisec.co.za · Doctrine
Talk to the builders
No sales theatre — you speak to engineering. We run the compose ourselves.
contact@mobisec.co.za · +27 61 610 1068 · Republic of South Africa