CertCordon

CertCordon is an endpoint security desktop agent plus a web console that enforces certificate-based device identity for accessing corporate apps, VPNs, and internal web services. Instead of relying on user passwords (phishable) or brittle IP allowlists, it continuously verifies that a device holds a valid, non-exportable client certificate bound to hardware-backed keys (TPM/Secure Enclave). If the certificate is missing, expired, or the device posture changes (e.g., disk encryption disabled, debugger tools installed), access is automatically downgraded or blocked via integrations with common identity providers and reverse proxies. The MVP focuses on small-to-mid businesses that want “good enough Zero Trust” without buying a full EDR suite. It includes guided setup, certificate issuance/rotation, and simple policy templates. This is a combination traditional + AI app: AI helps generate policies, troubleshoot failed handshakes, and explain remediation steps in plain language.