Vitni

The workhorse rung.

Norse for witness. Firmware locked in silicon rather than open, so a record can’t be repudiated by pointing at replaceable software.

Specifications

• STM32U585 + ATECC608B secure element
• Firmware locked — not user-replaceable
• Built for a hardware-rooted device identity on the rail
• Potted in clear resin; serialized

Read before buying — Rev 1

The shipping revision is Rev 1. Its silkscreen labels the button as a press gate, and on this revision the copper does not enforce one — the button is not a signing gate on Rev 1. If you need an enforced press gate, that is Vitni Plus. Repaired forward in Rev 2.

Availability

Shipping now, Rev 1, in small runs.

Try one before you buy one

Every attestation device signs a challenge and the record is checked in your browser at verifyknot.io/start — no account, no login. The verdict is computed from the record itself, not handed down by our server.

What it does not do

A signature proves that a specific key signed specific bytes. On its own it does not prove who held the key, that a person was present, or that the contents are true. Each rung of the line adds one of those, and we say which. The timestamp on a record is ours, not an outside authority’s. Tamper-evident, not tamper-proof.

Hand-built in small runs in Utah · veteran-owned (SDVOSB) · US shipping with tracking · returns