SunSpot
A network that disappears.
SunSpot · 2024 · Cybersecurity brand + site
A cybersecurity brand that masks the network before threats appear.
SunSpot is a zero-trust platform whose whole promise is absence. A service is reachable only by the identities policy allows. To everyone else, it isn't there. We built the brand for an idea that disappears on purpose.
Role · brand identity · visual system · iconography · website · launch social
↓ Turn it on
Turn it on.
A sunspot is a dark mark on the sun, the thing that isn't there. We made it a switch. OFF is the exposed network everyone runs. ON is the one that vanishes. The whole brand is one confident gesture: flip it.
The symbol
↓ The system
One system, sun to shadow.
An amber spectrum from first light to deep ember, a confident grotesk, a system of icons, a layout grid. Every part earns the brand's calm. Below: the colour, type and graphic language, then the deck it shipped in.
The SunSpot gradient · #C36626 → #EEA03A
Colour, type & icons
The deck
Behind the scenes
Launch · on LinkedIn
↓ The site
Inverted network.
The default internet connects first and authenticates second. By the time you check ID, the building is already mapped. The site we built flips the order: identity first, and reachability follows from policy.
Everywhere else
By step 01 you're on the radar.
SYN sent, server fingerprinted.
After the door is already open.
If the attacker hasn't already won.
SunSpot
By step 03 there is nothing to attack.
Cryptographic, dealerless, no shared secret.
Authorization before any data plane exists.
There is no service to connect to.
Zero Trust asks “should you get in?”
We ask “get in where?”
The conversations you won't have to sit through
after a scan
“We found another exposed service.”
A protected service doesn't appear as a target at all. Even if you found the network, you didn't find the service.
after a breach
“They were inside, so maybe everything was exposed.”
A foothold on the network creates no access. The investigation starts from identities and paths that actually existed.
new vendor
“The vendor needs a VPN.”
The vendor gets a scoped path to a defined service, for a defined time, under policy. Not a foothold on the network.
legacy & ot
“That legacy system can't be updated.”
SunSpot wraps it from the outside with an SDK, sidecar or inline device. Old workloads get identity and PQ-safe paths without touching their code.
disclosure
“Notify the whole database, just in case.”
You see exactly what was reachable, down to the identity, service, time, even the record. You notify only those it actually applies to.
Ready to rest easy?
The one path policy allows
NIST 800-207 · SOC 2 Type II · FIPS 203/204 · HIPAA · PCI-DSS · ISO 27001
Cassiopeia →
Next case
A white-label B2B ordering app for the hospitality supply trade.